exploit

The vulnerability exists in the `/__vite_rsc_findSourceMapURL` endpoint of the Vite RSC plugin. During development mode (vite dev), this endpoint accepts

This vulnerability exists in the Account module’s user registration endpoint. The `/Account/Register` page accepts a `returnUrl` parameter to redirect users

The vulnerability exists in builtin functions (flatten, min, max, mean, median) that recursively traverse user-supplied data structures (arrays, maps) without

How the Mentioned CVE Works (CVE-2025-12084) This vulnerability exists in the `xml.dom.minidom` module of CPython, the standard Python implementation. The

The vulnerability exists in the `fsSize()` function within the `systeminformation` npm package on Windows. The optional `drive` parameter is unsanitized

The vulnerability exists within the WP Directory Kit plugin for WordPress, specifically in the `wdk_generate_auto_login_link` function responsible for creating automatic

A logic flaw within the `sudo` command’s file handling on macOS could allow a locally executed application to bypass intended

The vulnerability CVE-2025-53963 exploits a fundamental weakness in the security configuration of the Thermo Fisher Ion Torrent OneTouch 2 (INS1005527)

The vulnerability exists in the Instagram authentication adapter of Parse Server. During the OAuth flow, the adapter improperly accepted a

The vulnerability exists in the `formDataToObject` function within the `@trpc/server` package, specifically used by the Next.js App Router adapter. When

The vulnerability arises from a misconfigured internal proxy within the runtimes-inventory-rhel8-operator. This proxy is intended to handle specific inventory reports

How the Mentioned CVE Works The vulnerability CVE-2025-37979 is a buffer overflow in the Qualcomm LPASS (Low Power Audio Subsystem)

The vulnerability CVE-2025-37998 exists within the `output_userspace()` function of the Open vSwitch (OVS) kernel module. The flaw stems from the

The vulnerability is a Time-of-Check-Time-of-Use (TOCTOU) race condition in the `filelock` Python library. The `UnixFileLock._acquire` method checks if a lock

The `bpf_redirect_peer` helper function in the Linux kernel is used by BPF programs to redirect a packet to a network

How the Mentioned CVE Works: The vulnerability exists in the Django-allauth social authentication adapters for Okta and NetIQ (OpenID Connect)

The vulnerability exists within the HTML pages served for password reset and email verification functionalities in Parse Server. These pages

In the Linux kernel’s x86 memory management, a race condition in the `should_flush_tlb()` function could cause necessary TLB (Translation Lookaside

The vulnerability exploits a missing nil check in the SIPGO library’s `NewResponseFromRequest` function. SIP request parsing succeeds even when a

How the mentioned CVE works CVE-2025-37958 is a race condition vulnerability in the Linux kernel’s memory management subsystem, specifically in

The vulnerability is a NULL pointer dereference in the `mtk_pmic_keys_probe` function of the Linux kernel’s MediaTek PMIC keys driver. During

The vulnerability CVE-2025-37967 is a deadlock condition within the Linux kernel’s USB Type-C Connector System Software Interface (UCSI) driver, specifically

How the mentioned CVE works: The vulnerability CVE-2025-37970 exists within the `st_lsm6dsx` Inertial Measurement Unit (IMU) driver of the Linux

The vulnerability is a use-after-free bug in the Linux kernel’s Hierarchical Fair Service Curve (HFSC) network packet scheduling subsystem. The

The vulnerability is a Regular Expression Denial of Service (ReDOS) in the figure caption extension (pymdownx.blocks.caption) of PyMdown Extensions. The

The vulnerability CVE-2025-37968 is a race condition-induced deadlock within the `opt3001` ambient light sensor driver in the Linux kernel. The

How the mentioned CVE works The vulnerability exists within the `st_lsm6dsx` inertial measurement unit (IMU) driver of the Linux kernel.

In django-allauth versions prior to 65.13.0, a flaw exists in the Identity Provider (IdP) component regarding session management and token

The vulnerability is a memory leak within the `parse_lease_state()` function of the ksmbd (kernel SMB daemon) module in the Linux

This vulnerability is a stored HTML injection in the LibreDesk contact management system. The flaw exists in the API endpoint

How the mentioned CVE works The vulnerability exists in the IP Virtual Server (IPVS) subsystem of the Linux kernel, which

How the CVE Works The vulnerability exists in the Linux kernel’s network scheduling (net_sched) subsystem. Queueing disciplines (qdiscs) like `fq`

This vulnerability exists in the netfilter ipset subsystem of the Linux kernel, specifically affecting hash-type sets that use timeouts. A

This vulnerability concerns an incorrect security mitigation in the Linux kernel for ARM64 (arm64) systems. The issue is related to

The vulnerability CVE-2025-37994 is a NULL pointer dereference (CWE-476) in the Linux kernel’s USB Type-C UCSI DisplayPort driver. It is

How the mentioned CVE works (around 20 lines): The vulnerability exists within the `qibfs` filesystem driver in the Linux kernel.

This vulnerability exists in the `wl1251` WiFi driver within the Linux kernel. During the transmission process, the driver’s `wl1251_tx_work` function

The vulnerability exists in the `rou3` router library, versions before the fix at commit f60b43f. This library normalizes URL paths

This vulnerability occurs in the Linux kernel’s `gpio-keys` input driver when the `PREEMPT_RT` (Real-Time) patch is enabled. Under standard kernel

How the mentioned CVE works The vulnerability is a flaw in the mail header parsing logic within Apple’s Mail framework

This vulnerability exists within the FaceTime application’s remote control feature on macOS. The core issue is a flaw in the

The vulnerability is an authorization bypass in the EduplusCampus Student Payment API endpoint /student/get-receipt. Authenticated users, such as students, can

CVE-2021-44228, known as Log4Shell, is a critical vulnerability in the Apache Log4j library. It enables remote code execution via improper

How the Mentioned CVE Works The vulnerability stems from a hardware defect in older VIA Technologies VT6415 and VT6330 PATA

The vulnerability in Apache Airflow arises from inadequate redaction of secret values within rendered templates accessible through the web UI.

The vulnerability CVE-2025-43497 is a sandbox escape flaw within the BackBoardServices framework in macOS. The macOS App Sandbox is a

The vulnerability exists in the `software_node_get_reference_args()` function within the Linux kernel’s software node subsystem, which is used to manage firmware

How the CVE Works: The vulnerability is a kernel memory leak in the ACPI Component Architecture (ACPICA). During early system

This vulnerability is a classic Dynamic Link Library (DLL) hijacking issue within Quark Cloud Drive version 3.23.2. The core flaw

How the Mentioned CVE Works CVE-2025-43473 is a critical information disclosure vulnerability in macOS Tahoe. The core flaw resides in

The CVE-2025-46287 vulnerability stems from an inconsistency in the user interface state management within the FaceTime application on macOS. This

The vulnerability exists within the `jbd2_journal_dirty_metadata()` function in the Linux kernel’s filesystem journaling layer. This function is critical for ensuring

The CVE-2025-65346 vulnerability is a Directory Traversal flaw in the `unzip` functionality of the alexusmai/laravel-file-manager package (versions 3.3.1 and below).

How the CVE Works The vulnerability exists within the `_download_file_or_dir` function of the ComposioHQ Python package, version 0.7.20. This function

The CVE-2025-38334 vulnerability in the Linux kernel’s SGX subsystem occurs when poisoned EPC pages are incorrectly considered for reclaim. Enclave

How the mentioned CVE works: CVE-2025-43523 is a permissions vulnerability within macOS Sequoia’s security framework. The flaw involves insufficient enforcement

The vulnerability CVE-2025-38328 is a null pointer dereference flaw in the Linux kernel’s JFFS2 flash filesystem. The issue occurs in

How the CVE Works: The CVE-2025-66675 vulnerability exists in the multipart request handler of Apache Struts. When the framework processes

How the mentioned vulnerability works: The half-blind Server Side Request Forgery (SSRF) vulnerability in kube-controller-manager arises from the in-tree Portworx

This vulnerability, CVE-2024-32059, is a critical Java deserialization issue within Liferay’s API. The `/api/jsonws/invoke` endpoint improperly deserializes untrusted data from

This vulnerability, CVE-2024-55297, is a critical SQL injection flaw within Liferay DXP’s and Portal’s dynamic data mapping (DDM) module. The

This vulnerability exploits the trust in the `X-Forwarded-For` HTTP header for client IP identification within the Misskey API rate limiter.

The vulnerability exists in the `/api/jsonws/invoke` endpoint of Liferay DXP/Portal. It allows unauthenticated remote code execution due to unsafe Java

CVE-2023-30597 is a critical deserialization vulnerability in Liferay Digital Experience Platform (DXP) and Liferay Portal. It affects the JSON web

This CVE targets a deserialization vulnerability within Apache’s data interaction protocols. The flaw resides in the improper validation of user-supplied

The vulnerability CVE-2025-43788 is a broken access control flaw in the organization selector component of Liferay Portal and Liferay DXP.

The critical vulnerability, known as React2Shell, resides in the insecure deserialization of the React Flight protocol used by React Server

How the Mentioned CVE Works The vulnerability CVE-2025-43790 is an Insecure Direct Object Reference (IDOR) flaw in Liferay Portal and

This vulnerability is an open redirect within the `/authentication/` endpoint of Mayan EDMS. The flaw exists due to improper validation

This critical vulnerability, CVE-2024-4340, is a deserialization of untrusted data issue within Liferay Portal and Liferay DXP. The flaw resides

The vulnerability, CVE-2025-XXXXX, exists in the data export functionality of the Misskey platform. When a user adds a private post

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 implemented AES encryption with hardcoded keys and initialization vectors, compromising cryptographic security.

The vulnerability CVE-2025-65950 in WBCE CMS versions 1.6.4 and below is a critical SQL injection flaw within the user management

The vulnerability is a detection bypass in the Fickling security analysis tool for Python pickle files. Pickle deserialization can execute

The vulnerability in Weblate stems from an insufficiently secured webhook endpoint that processes incoming HTTP requests without proper validation or

This critical vulnerability (CVE-2023-49606) in Liferay DXP and Portal arises from insecure deserialization of untrusted data within specific modules. The

The vulnerability exists within the `io.netty.handler.codec.http.HttpRequestEncoder` class. When encoding an HTTP request, this component writes the request URI directly into

The CVE-2025-43809 vulnerability is a Cross-Site Request Forgery (CSRF) flaw in the server license registration endpoint of Liferay Portal and

The vulnerability CVE-2023-33952 is an authentication bypass in Liferay DXP and Portal. It stems from improper validation of the “Remember

The vulnerability in ALTCHA libraries arises from insufficient semantic separation in HMAC computation for proof-of-work challenges. When a challenge is

This vulnerability is a reflected Cross-Site Scripting (XSS) flaw in the search bar portlet of Liferay Portal and Liferay DXP.

The vulnerability stems from broken authorization mechanisms within Weblate’s REST API, specifically affecting endpoints that handle user and project data.

The vulnerability CVE-2025-14674 is an expression injection flaw within the `QLExpressEngine.doEval` function of the aizuda snail-job task scheduling framework. This

How the Mentioned CVE Works The vulnerability CVE-2025-43787 is a stored cross-site scripting (XSS) flaw in Liferay Portal and Liferay

The vulnerability in Weblate arises from insufficient server-side validation during the invitation acceptance process. When a user generates an invitation,

The vulnerability CVE-2024-28822 is an SQL injection flaw within Liferay DXP’s and Portal’s social activity functionality. The issue originates in

This vulnerability, CVE-2025-53031, is a reflected Cross-Site Scripting (XSS) flaw within the `/authentication/` endpoint of Mayan EDMS. The issue stems

This vulnerability exploits a heuristic bypass in Fickling, a security tool for analyzing Python pickle files. Fickling relies on detecting

The vulnerability (CVE-2025-?????) is a trust boundary violation within the Universal Tool Calling Protocol (UTCP) Python client library. The flaw

The vulnerability exists in the `mlx4_en_create_rx_ring` function within the Linux kernel’s mlx4 Ethernet driver. This function is responsible for setting

The CVE-2025-39859 vulnerability is a use-after-free race condition within the `ptp_ocp` driver of the Linux kernel. The flaw exists in

The CVE-2025-49925 vulnerability is a Missing Authorization (CWE-862) flaw in the VibeThemes WPLMS WordPress plugin. It allows unauthenticated remote attackers

The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw within the `VDatePicker` component of Vuetify. It stems from the improper

The vulnerability exists in the internal `mergeDeep` utility function used by Vuetify’s Preset configuration feature to merge user-provided options with

The vulnerability in aircompressor’s Snappy and LZ4 decompressors stems from improper handling of malformed compressed data. When crafted inputs are

The vulnerability (CVE-2024-55269) exists within the Objects module of Liferay. Authenticated users with the Instance Administrator role can create or

The vulnerability (CVE-2024-XXXXX) in MineAdmin v3.x stems from an insecure default administrative password and improper access controls on the scheduled

How the CVE Works: The vulnerability resides within the Almost Native Graphics Layer Engine (ANGLE), a core component enabling WebGL

The vulnerability in Finality Provider versions up to 1.0.3 stems from a misconfiguration where EOTS manager endpoints are exposed without

In Apache StreamPark versions from 2.0.0 to before 2.1.7, the system employs a flawed encryption mechanism where sensitive data is