Poster - CVE CyberSecurity Database News (Page 223)

Feb 13, 2025 API Exploit Java

CVE-2025-1247 - How a Quarkus REST Field Injection Flaw Puts Your Java APIs at Risk

If you’re building Java APIs with Quarkus REST, you want performance and reliability. But the recent vulnerability CVE-2025-1247 exposes critical risks—allowing attackers to

Feb 13, 2025 Exploit SQL

CVE-2025-1094 - Exploiting SQL Injection in PostgreSQL libpq Escape Functions

PostgreSQL is famous for being a secure and reliable open-source database. But recently, a vulnerability surfaced, affecting the libpq client library and several PostgreSQL command-line

Feb 13, 2025 Exploit

CVE-2025-21700 - Privilege Escalation in Linux Kernel Traffic Control (tc) via Qdisc UAF

A serious vulnerability (CVE-2025-21700) in the Linux kernel's traffic control (tc) queueing discipline ("qdisc") system was patched. The bug allowed attackers

Feb 13, 2025 XSS WordPress API PHP

CVE-2024-13227 - Stored XSS Vulnerability in Rank Math SEO Plugin for WordPress – What You Need To Know

Published: June 2024 Introduction A new critical vulnerability, CVE-2024-13227, has been discovered in the popular Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

Feb 13, 2025 WebSocket

CVE-2025-1198 - How Personal Access Token Revocation Was Bypassed in GitLab ActionCable (With Exploit Insight)

--- What Is CVE-2025-1198? In early 2025, GitLab patched a critical security flaw: CVE-2025-1198. The bug affects *all versions* of GitLab CE/EE from 16.