exploit

How the CVE Works CVE-2025-29768 affects Vim’s zip.vim plugin when handling specially crafted ZIP archives. When a user opens a

How the CVE Works CVE-2025-2450 is a critical remote code execution vulnerability in NI Vision Builder AI (VBAI) due to

How the CVE Works CVE-2025-8876 is an Improper Input Validation flaw in N-able N-central that enables OS Command Injection. Attackers

How the CVE Works CVE-2025-8875 is a critical deserialization flaw in N-able N-central before version 2025.3.1. The vulnerability arises when

The vulnerability (CVE-2023-40477) in WinRAR arises due to improper validation of file paths within crafted archive files. Attackers exploit this

How the CVE Works The vulnerability (CVE-2025-2013) in Ashlar-Vellum Cobalt arises due to improper handling of CO file parsing, leading

How the CVE Works CVE-2025-52327 is a critical SQL injection vulnerability in Restaurant Order System 1.0. The flaw exists in

How the CVE Works CVE-2025-20180 is a stored XSS vulnerability in Cisco AsyncOS Software for Secure Email and Web Manager

How the CVE Works The vulnerability (CVE-2025-XXXX) in Backstage Scaffolder arises when using the `fetch:template` action with secrets (${{ secrets.x

How the CVE Works Apache Superset’s `/explore` endpoint lacks proper authorization checks, allowing authenticated users to enumerate datasource metadata by

How the CVE Works: CVE-2025-55193 affects Active Record in Ruby on Rails, where user-supplied input passed to methods like `find`

The CVE-2025-XXXX vulnerability in Apache Tomcat arises due to improper handling of session identifiers via the rewrite valve. Attackers can

How the CVE Works CVE-2025-XXXX affects OMERO.web versions prior to 5.29.1. When a user attempts to reset their password using

The CVE-2024-XXXX (MadeYouReset) vulnerability in HTTP/2 allows attackers to force servers to reset streams excessively, potentially leading to resource exhaustion.

How the CVE Works The vulnerability in External Secrets Operator (v0.15.0–v0.19.1) stems from missing namespace restrictions in `List()` calls for

How the CVE Works: The vulnerability in Flowise arises due to improper handling of user-supplied input in a dynamic `Function`

How the CVE Works The vulnerability exploits malformed HTTP/2 control frames (WINDOW_UPDATE, HEADERS, PRIORITY) to force servers into resetting streams

How the CVE Works The `steam-workshop-deploy` GitHub Action fails to exclude the `.git` directory during deployment packaging, leading to unintentional

Apache Tomcat’s Improper Resource Shutdown or Release vulnerability (CVE-2025-XXXXX) allows attackers to trigger a denial-of-service (DoS) condition via a “made

How the CVE Works Apache Superset uses a denylist (DISALLOWED_SQL_FUNCTIONS) to block dangerous SQL functions. However, an attacker can bypass

How the CVE Works The Python-Future module (v1.0.0) automatically imports `test.py` if present in the working directory or sys.path. This

How the CVE Works The vulnerability occurs in Astro (v5.12.8) when using the Node adapter in standalone mode with `trailingSlash:

How the CVE Works CVE-2025-9039 exploits a misconfiguration in the Amazon ECS agent’s introspection API, which runs on port 51678.

How the CVE Works The vulnerability arises due to insufficient input sanitization in Apache Superset’s chart visualization feature. An authenticated

How the CVE Works Flowise versions before 3.0.1 lack proper authentication and role-based access controls (RBAC). The Custom MCPs feature

How the CVE Works Soosyze CMS 2.0 lacks rate-limiting and account lockout mechanisms on the `/user/login` endpoint, enabling brute-force attacks.

How the CVE Works: CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49. The flaw arises due to

How the CVE Works The vulnerability in Apache Superset arises when a guest user requests chart data via the `/chart/data`

How the CVE Works The vulnerability occurs when `/proc` or `/sys` in the container’s root filesystem (rootfs) are symbolic links.

How the CVE Works The vulnerability arises due to improper handling of raw pointers in user-defined implementations of the `scratchpad::Tracking`

How the CVE Works CVE-2025-24293 exploits Active Storage’s insufficient validation of image transformation methods when using `image_processing` with mini_magick. By

How the CVE Works The vulnerability in PyPDF arises due to improper handling of FlateDecode streams in manipulated PDF files.

How the CVE Works The CVE-2025-XXXXX vulnerability in OliveTin 2025.4.22 arises due to improper sanitization of user-supplied input in the

How the CVE Works CVE-2024-3521 exploits Helm’s JSON Schema validation by crafting a malicious `values.schema.json` file containing a `$ref` pointer

How the CVE Works: This CVE exploits a reflected XSS vulnerability in Liferay Portal (7.4.0–7.4.3.131) and Liferay DXP (2024.Q4.0–2024.Q4.7, 2024.Q3.1–2024.Q3.13,

The CVE-2025-XXXX vulnerability in svg-sanitizer arises due to improper case-sensitive handling of SVG attribute names during sanitization. The library checks

How the CVE Works: The vulnerability occurs when an attacker uploads a profile picture exceeding the 300KB limit in Liferay

The CVE-2025-XXXXX vulnerability in Bouncy Castle for Java stems from improper handling of ASN.1 object identifiers in the `ASN1ObjectIdentifier.java` file.

How the CVE Works CVE-2025-1550 bypasses Keras v3’s `safe_mode` protection by exploiting built-in module functions like keras.utils.get_file(). Attackers craft malicious

How the CVE Works The vulnerability (CVE-2024-XXXX) in `content-security-policy-parser` versions ≤ 0.5.0 allows prototype pollution via a malicious CSP header

This CVE exploits a Server-Side Request Forgery (SSRF) vulnerability in FreeMarker templates within Liferay Portal and Liferay DXP. Attackers can

How the CVE Works The vulnerability exists in pyLoad’s `/json/add_package` API endpoint, where the `add_links` parameter is improperly sanitized before

The CVE-2025-XXXXX vulnerability in Mattermost Confluence Plugin versions before 1.5.0 occurs due to improper authentication checks in the channel subscription

How the CVE Works The vulnerability exists in Komari’s 2FA verification logic within api/login.go. The function `Verify2FA()` contains a flawed

How the CVE Works The vulnerability arises in Komari’s WebSocket upgrader, which lacks proper origin validation. When an authenticated administrator

How the CVE Works The vulnerability in the Oak Deno framework arises due to inefficient parsing of the `x-forwarded-proto` and

How the CVE Works The vulnerability arises when HFS adds a web link without the `rel=”noopener noreferrer` attribute, allowing malicious

How the CVE Works The vulnerability stems from a parsing logic error in picklescan and modelscan when handling the `STACK_GLOBAL`

The CVE-2025-XXXXX vulnerability in Mattermost Confluence Plugin (< v1.5.0) arises due to improper validation of input types in the “create

The CVE-2025-XXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) arises due to improper validation of incoming webhook request

The CVE-2025-XXXX vulnerability in Mattermost Confluence Plugin versions before 1.5.0 stems from improper authorization checks in the subscription creation endpoint.

The CVE-2025-XXXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) stems from improper validation of unusual or exceptional conditions

The CVE-2025-XXXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) arises due to improper validation of unusual or exceptional

The CVE-2025-XXXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) arises due to insufficient authorization checks in the `GET

The CVE-2025-XXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) stems from improper authorization checks when handling API requests.

The vulnerability in Keras (CVE-2025-XXXX) stems from an unsafe deserialization flaw in the `Model.load_model` method. When loading a `.keras` model

The CVE-2025-XXXXX vulnerability in Mattermost Confluence Plugin versions before 1.5.0 allows unauthenticated attackers to create unauthorized channel subscriptions through API

How the CVE Works Litestar fails to sanitize URL paths when logging exceptions, enabling CRLF injection if debug logging or

The CVE-2025-XXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) stems from improper authorization checks when handling subscription edits.

The CVE-2025-XXXX vulnerability in the Mattermost Confluence Plugin (versions < 1.5.0) stems from improper authorization checks in the API endpoint

How the CVE Works The vulnerability in `slab` v0.4.10 stems from an incorrect bounds check in the `get_disjoint_mut` method. Instead

This vulnerability in Liferay Portal and Liferay DXP arises due to insufficient validation of user-supplied URLs in the `portal-settings-authentication-opensso-web` component.

How the CVE Works CVE-2025-24938 is a critical command injection vulnerability in a web application that fails to sanitize user

How the CVE Works CVE-2025-50467 is a SQL injection vulnerability in OpenMetadata versions <=1.4.4. The flaw exists in the `listCount`

How the CVE Works CVE-2025-54394 affects Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 to 11.1.25162.02. The vulnerability arises due

How the CVE Works OpenMetadata versions <=1.4.4 contain a SQL injection vulnerability in the `listCount` function within the DocStoreDAO interface.

How the CVE Works CVE-2025-54392 is a stored Cross-Site Scripting (XSS) vulnerability in Netwrix Directory Manager (formerly Imanami GroupID) versions

How the CVE Works CVE-2025-24937 is a critical Local File Inclusion (LFI) vulnerability in a web application that allows attackers

How the CVE Works CVE-2025-54393 is a static code injection vulnerability in Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0

How the CVE-2025-50466 Works OpenMetadata versions up to 1.4.4 contain a SQL injection vulnerability in the TestDefinitionDAO interface. The flaw

How the CVE Works CVE-2025-50465 affects OpenMetadata versions <=1.4.4, where the `listCount` function in `TestDefinitionDAO` is vulnerable to SQL injection.

How the CVE Works CVE-2025-54397 is a vulnerability in Netwrix Directory Manager (formerly Imanami GroupID) versions 11.0.0.0 to 11.1.25162.01, where

How the CVE Works CVE-2025-54395 is a stored Cross-Site Scripting (XSS) vulnerability in Netwrix Directory Manager (formerly Imanami GroupID) versions

How the CVE Works CVE-2025-53606 is a critical deserialization vulnerability in Apache Seata (incubating) 2.4.0, allowing remote attackers to execute

How the CVE Works CVE-2025-24936 is a critical command injection vulnerability in a web application that allows unfiltered user input

The vulnerability in AuthKit React Router Library (versions before 0.7.0) exposed sensitive authentication artifacts (sealedSession and accessToken) by returning them

How the CVE Works: OpenBao’s LDAP authentication with `username_as_alias=true` fails to normalize user-supplied usernames when assigning MFA requirements. Attackers can

The CVE in OpenBao’s API-driven audit subsystem allows privileged API operators to bypass intended restrictions. Attackers can exploit a maliciously

How the CVE Works The vulnerability occurs in Fedify’s `handleInboxInternal` function where HTTP-signed ActivityPub activities are processed before key verification.

How the CVE Works The vulnerability in OpenBao’s MFA system stems from improper normalization of TOTP tokens. The underlying library

Apache CXF’s JMS configuration interface allowed untrusted users to specify RMI or LDAP URLs, enabling remote code execution (RCE) via

How the CVE Works The vulnerability exploits weak authentication tag validation in JSON Web Encryption (JWE) when using AES-GCM. Attackers

How the CVE Works Cloudflare quiche, a QUIC protocol implementation, is vulnerable to an infinite loop when processing RETIRE_CONNECTION_ID frames.

How the CVE Works The vulnerability (CVE-2025-XXXX) in Apache Seata 2.4.0 arises due to improper validation of serialized data during

How the CVE Works The vulnerability (CVE-2025-XXXXX) in OpenBao allows accounts with access to the highly-privileged identity entity system in

The CVE-2025-XXXXX vulnerability in Thinbus SRP JavaScript client (versions before 2.0.1) stems from a protocol compliance flaw where the client

How the CVE Works The vulnerability exploits Astro’s trailing slash redirection logic when handling double slashes in URLs. When `trailingSlash`

How the CVE Works: The vulnerability in Ollama v0.1.33 arises due to insufficient input validation in the `/api/pull` endpoint. Attackers

How the CVE Works The vulnerability in @workos-inc/authkit-remix (versions <0.15.0) exposed sensitive authentication tokens (sealedSession and accessToken) by returning them

How the CVE Works The vulnerability in uv (versions ≤0.8.5) stems from improper handling of remote ZIP archives during streamwise

How the CVE Works The vulnerability in OpenBao’s `userpass` authentication method allows attackers to enumerate valid usernames by exploiting timing

How the CVE Works The vulnerability in OpenBao’s TOTP secrets engine allows valid Time-based One-Time Password (TOTP) codes to be

How the CVE Works The vulnerability in `skops.card.Card.get_model` arises due to unsafe deserialization via joblib.load(). When a non-ZIP file (e.g.,

How the CVE Works The CVE-2025-XXXX vulnerability in ExecuTorch arises due to improper bounds checking during model loading. An integer

How the CVE Works The vulnerability exists in the `entry_cover_image_caption.jsp` file of Liferay Portal’s blogs-web module. Due to improper input

How the CVE Works The vulnerability in Keycloak-services arises due to insufficient input validation during email registration. Attackers can inject

The vulnerability in Operator-SDK (< 0.15.2) arises due to insecure permissions (664) set on `/etc/passwd` during container image builds. The

How the CVE Works The vulnerability in `github.com/rs/cors` middleware arises when processing malicious CORS preflight requests containing an excessively long

How the CVE Works CVE-2025-23209 is a critical vulnerability in Craft CMS that allows remote code execution (RCE) under specific

How the CVE Works: The vulnerability in OpenBao’s Userpass and LDAP authentication systems allows attackers to bypass user lockout protections.