Poster - CVE CyberSecurity Database News (Page 144)

Mar 14, 2025 Exploit

CVE-2023-33300 - How Command Injection in FortiNAC Lets Attackers Access Your Files

In May 2023, cybersecurity researchers disclosed a serious vulnerability affecting Fortinet FortiNAC — network access control software from Fortinet used by organizations worldwide. CVE-2023-33300 was identified

Mar 14, 2025 XSS Windows

CVE-2024-26006 - Understanding and Exploiting Cross-Site Scripting in FortiOS and FortiProxy SSL VPN

In early 2024, security researchers discovered a serious vulnerability identified as CVE-2024-26006 affecting Fortinet's FortiOS and FortiProxy SSL VPN web UI. This "

Mar 14, 2025 API

CVE-2024-8176 - Stack Overflow in libexpat via Recursive Entity Expansion — A Deep Dive

In June 2024, security researchers uncovered a critical vulnerability in the popular XML parsing library libexpat. Tracked as CVE-2024-8176, this flaw exposes applications to stack

Mar 14, 2025 WordPress API Exploit PHP

CVE-2025-1285 - How Unauthorized Attackers Can Hijack Resido Real Estate WordPress Sites

In early 2025, a high-risk security flaw was uncovered in the popular Resido - Real Estate WordPress Theme. This vulnerability, tracked as CVE-2025-1285, allows anyone—

Mar 14, 2025 Exploit

CVE-2024-55549 - Breaking Down libxslt’s xsltGetInheritedNsList Use-After-Free Bug

In June 2024, a new vulnerability tracked as CVE-2024-55549 was identified in the popular XML stylesheet library libxslt. This bug, lurking since before version 1.