Poster - CVE CyberSecurity Database News (Page 229)

Feb 12, 2025 XSS WordPress API Exploit

CVE-2024-10322 - How Brizy – Page Builder Plugin for WordPress Was Vulnerable to Authenticated SVG XSS

--- If you use WordPress to build sites, you may have heard of Brizy – Page Builder, a popular plugin used on more than 90,000

Feb 12, 2025 API SQL Apache

CVE-2024-32838 - SQL Injection in Apache Fineract REST API Endpoints – What You Need to Know

In June 2024, a critical security vulnerability was disclosed in Apache Fineract (official advisory link), an open-source platform known for powering microfinance and digital lending

Feb 12, 2025 RCE Exploit PHP

CVE-2025-1186 - Critical Remote Deserialization Vulnerability in XunRuiCMS <=4.6.4 (Exploit Details Inside)

A new critical security flaw, CVE-2025-1186, has been found in *XunRuiCMS*, an open-source content management system widely used in the Chinese web development community. According

Feb 12, 2025 API Exploit gRPC

CVE-2025-1243 - Data Converter Not Applied to Update Responses in Temporal api-go Proxy (<v1.44.1)

Temporal is a popular open-source workflow orchestration platform often used by companies to build distributed applications. The api-go library is one of the main ways

Feb 12, 2025

CVE-2025-23359 - Breaking Down the NVIDIA Container Toolkit TOCTOU Vulnerability (PoC, Technical Details & Exploit Insights)

Published: June 2024 Severity: Critical CVE-ID: CVE-2025-23359 Vendor: NVIDIA Component: NVIDIA Container Toolkit (Linux) Vulnerability Type: Time-of-Check Time-of-Use (TOCTOU) Attack Vector: Malicious/Evil Container Image