exploit

The CVE-2025-1234 vulnerability in ThinkPHP v5.1 arises due to improper input validation in the `routecheck` function, allowing path traversal attacks.

How the CVE Works: CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49. The flaw arises due to

The CVE-2024-31471 vulnerability in RISC Zero zkVM arises from improper handling of signed integer division operations. The circuit logic allowed

How the CVE Works The vulnerability occurs when an authenticated user with edit rights creates an XClass with a database

The vulnerability in XWiki occurs when exporting a page to XML via the `?xpage=xml` parameter. Any user with view rights

How the CVE Works The CVE-2025-54381 vulnerability in BentoML (v1.4.0 to 1.4.19) allows unauthenticated attackers to exploit SSRF via file

How the CVE Works CVE-2025-54350 affects iperf versions before 3.19.1, where a malformed authentication request triggers an assertion failure in

How the CVE Works CVE-2025-54349 is an off-by-one error in `iperf_auth.c` in iperf versions before 3.19.1, leading to a heap-based

How the CVE Works: CVE-2025-27205 affects Adobe Experience Manager (AEM) Screens versions FP11.3 and earlier. The vulnerability arises due to

How the CVE Works: CVE-2025-53537 affects LibHTP (versions ≤0.5.50), a critical component for HTTP traffic parsing. The vulnerability stems from

How the CVE Works The vulnerability in CodeIgniter (versions < 4.6.2) arises when using ImageMagick (imagick) for image processing. Attackers

How the CVE Works CVE-2025-54351 exploits a buffer overflow vulnerability in iperf versions before 3.19.1, specifically in the `net.c` component.

How the CVE Works The vulnerability exists in the `/cusfindphar2.php` file of Code-Projects Online Medicine Guide 1.0. The `Search` parameter

How the CVE Works The vulnerability in Code-Projects Human Resource Integrated System 1.0 resides in the `/insert-and-view/action.php` file, where improper

How CVE-2025-8503 Works CVE-2025-8503 is a critical SQL injection vulnerability in Code-projects Online Medicine Guide 1.0. The flaw exists in

How the CVE Works The vulnerability exists in the `/insert-and-view/action.php` file of Code-Projects Human Resource Integrated System 1.0. An attacker

How the CVE Works CVE-2025-8499 is a critical SQL injection vulnerability in Code-Projects Online Medicine Guide 1.0, specifically in the

How the CVE Works CVE-2025-8502 is a critical SQL injection vulnerability in Online Medicine Guide 1.0, specifically in the `/changepass.php`

The vulnerability in Online Medicine Guide 1.0 (CVE-2025-8498) allows remote attackers to execute arbitrary SQL queries via the `uname` parameter

How the CVE Works The vulnerability occurs in Fiber’s `Ctx.BodyParser` when parsing form data with an excessively large numeric key

How the CVE Works The vulnerability arises due to improper input sanitization in two XWiki templates (job_status_json and distribution). An

How the CVE Works The vulnerability in FPDI (Free PDF Document Importer) arises due to improper handling of specially crafted

How the CVE Works CVE-2025-20189 exploits improper memory management in Cisco IOS XE’s Cisco Express Forwarding (CEF) when processing ARP

How the CVE Works: CVE-2025-49462 is a stored cross-site scripting (XSS) vulnerability in Zoom Client versions prior to 6.4.5. An

How CVE-2025-0509 Works CVE-2025-0509 exploits a flaw in Sparkle’s update verification mechanism (prior to v2.6.4). Attackers can manipulate the update

How the CVE Works CVE-2025-30666 is a NULL pointer dereference vulnerability in Zoom Workplace Apps for Windows. When an authenticated

How the CVE Works CVE-2025-20137 exploits a misconfiguration in Cisco IOS Software running on Catalyst 1000 and 2960L Switches. When

How the CVE Works CVE-2025-30665 is a NULL pointer dereference vulnerability in Zoom Workplace Apps for Windows. When an authenticated

How the CVE Works: CVE-2025-49464 is a classic buffer overflow vulnerability in Zoom Client for Windows, triggered when processing maliciously

How the CVE Works The vulnerability stems from improper storage of SNMPv3 configuration in Cisco IOS/IOS XE startup configurations. Even

How the CVE Works: CVE-2025-46788 is caused by improper certificate validation in Zoom Workplace for Linux versions before 6.4.13. An

How the CVE Works CVE-2025-53541 is a stored Cross-Site Scripting (XSS) vulnerability in Tuleap Community and Enterprise Editions. Attackers with

How the CVE Works CVE-2025-49463 is an information disclosure flaw in Zoom Clients for iOS versions before 6.4.5. Due to

How the CVE Works CVE-2025-30749 is a critical vulnerability in Oracle Java SE’s 2D component, affecting multiple versions (8u451, 11.0.27,

How the CVE Works CVE-2025-40686 is a reflected XSS vulnerability in Human Resource Management System (HRMS) v1.0. The flaw exists

How the CVE Works CVE-2025-30752 is a vulnerability in Oracle Java SE and GraalVM for JDK (version 24.0.1) affecting the

How the CVE Works The vulnerability arises due to inconsistent path handling in RatPanel’s middleware. When a double slash (//api/ws/ssh)

How the CVE Works: CVE-2025-50069 is a vulnerability in the Java VM component of Oracle Database Server (versions 19.3-19.27 and

How the CVE Works CVE-2025-50065 is a low-severity vulnerability in Oracle GraalVM for JDK (Native Image component) version 24.0.1. The

How the CVE Works CVE-2025-40683 is a reflected XSS vulnerability in Human Resource Management System (HRMS) version 1.0. The flaw

How the CVE Works: CVE-2025-40682 exploits improper input sanitization in the `/controller/ccity.php` endpoint of Human Resource Management System (HRMS) v1.0.

How the CVE Works CVE-2025-50106 is a critical vulnerability in Oracle Java SE’s 2D component, affecting multiple versions (8u451, 11.0.27,

How the CVE Works CVE-2025-40684 is a reflected XSS vulnerability in Human Resource Management System (HRMS) version 1.0. The flaw

How the CVE Works: CVE-2025-50059 is a critical vulnerability in Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition,

How the CVE Works CVE-2025-40685 is a reflected XSS vulnerability in Human Resource Management System (HRMS) version 1.0. The flaw

How the CVE Works CVE-2023-22067 affects Oracle Java SE’s JSSE (Java Secure Socket Extension) component, specifically in TLS implementations. An

How the CVE Works: The vulnerability arises from improper path validation in Claude Code versions prior to 1.0.24. Instead of

How the CVE Works Apache Zeppelin versions 0.11.1 to before 0.12.0 suffer from improper input validation in JDBC connection string

How the CVE Works The vulnerability arises due to an incomplete blacklist in Apache Zeppelin’s Helium module, allowing stored Cross-Site

How the CVE Works The vulnerability in copyparty arises from improper validation of user-supplied regular expressions in the `filter` parameter

How the CVE Works The vulnerability exists in the `addcrypted` endpoint of pyLoad-ng due to improper sanitization of the `package`

How the CVE Works The vulnerability arises when IPX checks whether a file path is within an allowed directory (e.g.,

How the CVE Works Apache Zeppelin versions 0.11.1 to before 0.12.0 fail to validate WebSocket origins, allowing attackers to bypass

How the CVE Works The vulnerability occurs when parsing malicious TOML input containing the `__proto__` key. The `js-toml` library improperly

How the CVE Works The Grafana Infinity Datasource Plugin (<1.4.2) suffers from an SSRF vulnerability due to improper URL validation.

How the CVE Works The vulnerability occurs due to improper escaping of query parameters in ADOdb when interacting with SQLite3

The CVE-2025-XXXXX vulnerability in Hashicorp Vault allows attackers to bypass MFA rate limits and reuse TOTP tokens during authentication. The

How the CVE Works The vulnerability arises in Hashicorp Vault’s TLS certificate authentication method when a non-CA certificate is configured

The CVE-2025-XXXXX vulnerability in Hashicorp Vault allows attackers to bypass the lockout feature for Userpass and LDAP authentication methods. The

How the CVE Works The vulnerability in Hashicorp Vault’s TOTP Secrets Engine allows time-based one-time passwords (TOTP) to be reused

How the CVE Works The vulnerability (CVE-2025-12345) allows a privileged Vault operator with write access to the root namespace’s identity

How the CVE Works: The vulnerability (CVE-2025-XXXX) in Hashicorp Vault’s `userpass` authentication method arises from a timing side-channel issue. When

How the CVE Works The vulnerability exists in Microweber CMS versions 2.0.0 to 2.0.19. A reflected XSS flaw occurs in

Microweber CMS versions 2.0.0 through 2.0.19 are vulnerable to a stored Cross-Site Scripting (XSS) attack in the `/projects/profile` homepage endpoint.

How the CVE Works The vulnerability (CVE-2025-XXXX) in Hashicorp Vault allows a privileged operator with `sys/audit` write permissions to execute

How the CVE Works The vulnerability exists in the `live_edit.module_settings` API endpoint of Microweber CMS (versions 2.0.0 to 2.0.19). An

How the CVE Works The vulnerability exists in the `@nestjs/devtools-integration` package, which exposes an unsafe HTTP endpoint (/inspector/graph/interact) during local

How the CVE Works The vulnerability exists in Microweber CMS versions 2.0.0 to 2.0.19 due to insufficient input sanitization in

How the CVE Works OpenSearch versions before 2.19.3.0 and 3.0.0 incorrectly enforce Field-Level Security (FLS) on nested JSON object fields.

How the CVE Works MaterialX files support nested imports via XInclude tags, processed recursively without depth limits. An attacker can

The CVE-2025-XXXX vulnerability stems from a phishing attack against the maintainers of the `num2words` Python library, leading to the unauthorized

How the CVE Works This vulnerability occurs in MaterialX’s MTLX XML parsing logic when processing deeply nested `nodegraph` elements. The

How the CVE Works The vulnerability occurs in OpenEXR when processing a deep scanline image with a large sample count

How the CVE Works The vulnerability occurs in OpenEXRCore when decompressing DWAA-packed scan-line EXR files. The `LossyDctDecoder_execute` function in `internal_dwa_decoder.h`

How the CVE Works The vulnerability in `@nyariv/sandboxjs` (<= v0.8.23) arises due to improper validation of user-supplied input when processing

How the CVE Works The vulnerability in OpenEXR arises due to unchecked header values in EXR image files. The `dataWindow`

How the CVE Works The vulnerability occurs in OpenEXRCore when processing ZIPS-packed deep scan-line EXR files. A maliciously crafted chunk

How the CVE Works The vulnerability occurs in MaterialXCore when parsing shader nodes from an MTLX file. In Material.cpp, the

How the CVE Works In MaterialXCore’s Material.cpp, when parsing shader nodes from an MTLX file, the code retrieves an output

How the CVE Works: The vulnerability in MS-Swift’s web-ui (version <= X.Y.Z) allows command injection via the `–output_dir` parameter during

How the CVE Works The vulnerability occurs in `modelscope/ms-swift` due to unsafe deserialization of YAML files using `yaml.load()` with yaml.FullLoader.

How the CVE Works The vulnerability exists in the Image plugin of Apache JSPWiki, where improper input sanitization allows an

How the CVE Works The vulnerability occurs when ms-swift processes malicious adapter model files from ModelScope. Attackers craft pickle-serialized files

How the CVE Works Apache Struts Extras before version 2 contains an improper output neutralization vulnerability in its logging mechanism

How the CVE Works The vulnerability in `parsePush.ts` arises due to improper handling of Git PACK file signatures. The parser

How the CVE Works GitProxy uses the `0000000000000000000000000000000000000000` hash to detect new branches in `getDiff.ts` and parsePush.ts. An attacker can

How the CVE Works The vulnerability exploits GitHub’s incomplete validation of Git push packfiles. When a user pushes changes, GitHub’s

How the CVE Works The vulnerability exists in GitProxy’s push parser (parsePush.ts), which fails to properly validate multi-branch pushes. When

How the CVE Works The vulnerability arises when untrusted data from the HTTP `Proxy-Authorization` header is processed by `Extension::try_from` and

How the CVE Works The vulnerability in jshERP v3.5 and earlier resides in the `/user/delete` endpoint of the Account Handler

How the CVE Works CVE-2025-22165 is an Arbitrary Code Execution (ACE) vulnerability in Sourcetree for Mac (v4.2.8). A locally authenticated

How the CVE Works The vulnerability in ruby-saml arises from improper validation order when processing SAML responses. The library first

How the CVE Works The vulnerability in pyLoad’s `/json/add_package` API endpoint allows attackers with package-creation privileges to inject malicious log

The CVE-2025-XXXXX vulnerability in Keycloak allows privilege escalation in the Admin Console when FGAPv2 (Fine-Grained Admin Permissions v2) is enabled.

How the CVE Works The vulnerability in Bacula-web (before v9.7.1) stems from improper input sanitization in HTTP GET requests. An

How the CVE Works: Memos v0.24.3 and prior fails to sanitize image URLs in markdown content. Attackers can craft malicious

How the CVE Works The vulnerability arises when Bugsnag constructs file paths using untrusted `event_id` input without proper validation. An

When firewalld is reloaded (e.g., via firewall-cmd –reload), Docker fails to restore critical iptables rules that isolate container networks. This

Netavark, a network stack for containers used with Podman, mishandles DNS resolution due to the removal of the `dns.podman` search

The CVE-2025-XXXX vulnerability in Z-Push versions before 2.7.6 allows SQL injection via unparameterized queries in the IMAP backend. Attackers manipulate