Poster - CVE CyberSecurity Database News (Page 281)

Jan 28, 2025 Windows Exploit

CVE-2025-0065 - Exploiting Argument Injection in TeamViewer_service.exe for Local Privilege Escalation

In early 2025, security researchers discovered a serious vulnerability—CVE-2025-0065—in TeamViewer’s Windows client. If you’re using TeamViewer (before version 15.62), pay

Jan 28, 2025 Exploit Java Apache

CVE-2024-23953 - How a Simple Arrays.equals() Mistake in Apache Hive Opened the Door to Signature Forgery

--- Introduction In early 2024, a major security vulnerability—CVE-2024-23953—was discovered in Apache Hive affecting how the LlapSignerImpl component compared digital signatures. Due to

Jan 28, 2025 Exploit

CVE-2025-0290: Critical Vulnerability in GitLab CE/EE Leads to Unresponsive Background Jobs

A newly discovered vulnerability, labelled CVE-2025-0290, has been found to affect all versions of GitLab CE/EE (Community Edition/Enterprise Edition) staring from version 15.

Jan 28, 2025 Windows

CVE-2025-23084 - Node.js Path Handling Vulnerability on Windows Exposes Root Directory via `path.join`

Date Published: June 2024 CVE: CVE-2025-23084 Platform: Windows Component: Node.js (Affected path utilities, specifically path.join) Introduction A new vulnerability, CVE-2025-23084, has been discovered

Jan 28, 2025

CVE-2024-45341 - Certificate URI with IPv6 Zone ID Bypasses Name Constraints in Private PKIs

The software world cares a lot about authentication and trust, and Public Key Infrastructure (PKI) is the backbone of digital certificates everywhere. Occasionally, vulnerabilities pop