Poster - CVE CyberSecurity Database News (Page 179)

Feb 27, 2025 Exploit

CVE-2024-41334 - DrayTek Vigor Certificate Validation Bypass Leads to Remote Code Execution

--- Overview A newly discovered vulnerability tracked as CVE-2024-41334 affects a wide range of DrayTek Vigor devices, allowing attackers to upload and execute malicious code

Feb 27, 2025 API

CVE-2025-27154 - How Weak Permissions in Spotipy’s Cache File Can Expose Your Spotify Account

Date: 2024-06-10 Author: Security Insights Lab Overview A recent security flaw was discovered in the popular Python library, Spotipy, which lets developers access the Spotify

Feb 27, 2025 XSS WordPress

CVE-2025-1450: Stored XSS Vulnerability in Floating Chat Widget for WordPress - Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty Plugin (up to Version 3.3.5)

A new vulnerability, identified as CVE-2025-1450, has been discovered in the Floating Chat Widget – Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call

Feb 27, 2025 XSS API OAuth

CVE-2024-2321 - Bypassing API Access Security in WSO2 Using Just a Refresh Token

--- WSO2 is a popular platform used by businesses and developers to manage APIs, identity, and access. If you’re running WSO2 API Manager, Identity

Feb 27, 2025

CVE-2025-21776 - Critical Linux Kernel USB Hub Vulnerability Explained

The Linux kernel is the beating heart of countless devices—including many you use daily. Despite its robustness, security bugs can slip through, and sometimes,