Poster - CVE CyberSecurity Database News (Page 225)

Feb 13, 2025 RCE

CVE-2023-34398 - Mercedes-Benz NTG6 Head-Unit USB Profile Import – A Deep Dive into the Boost Library Vulnerability

Mercedes-Benz cars are often seen as luxury vehicles packed with the latest tech. But, like any high-tech device, they can also have security holes. Today,

Feb 13, 2025 Exploit

CVE-2025-1127 - How Attackers Can Execute Arbitrary Code & Modify Any Files as an Unprivileged User

In early 2025, security researchers uncovered a severe vulnerability—CVE-2025-1127—that affects millions of Linux systems worldwide. This flaw grants attackers the ability to run

Feb 13, 2025

CVE-2025-24888 - Code Execution Vulnerability in SecureDrop Client via Malicious Server

Summary: A critical vulnerability, CVE-2025-24888, was discovered in the SecureDrop Client—a desktop application used in newsrooms for secure source communication. This flaw, fixed in

Feb 13, 2025 API Exploit Apache

CVE-2025-26511 - Privilege Escalation in Instaclustr Cassandra-Lucene-Index Plugin—Your Data At Risk

> Summary: CVE-2025-26511 exposes a dangerous weakness found in the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin, affecting plugin versions 4.-rc1-1.. through 4.

Feb 13, 2025 API Java

CVE-2025-24904 - Critical Vulnerability in libsignal-service-rs Exposes Signal Users to Message Injection Attacks

A severe security vulnerability has been discovered in libsignal-service-rs (the Rust translation of the Signal transport protocol, originally implemented in Java). CVE-2025-24904 allows servers or