Poster - CVE CyberSecurity Database News (Page 313)

Jan 21, 2025 API Exploit

CVE-2025-23369 - Inside the Signature Spoofing Flaw in GitHub Enterprise Server

In mid-2024, a significant security vulnerability, now known as CVE-2025-23369, was discovered in GitHub Enterprise Server (“GHES”). This flaw centers on the way cryptographic signatures

Jan 21, 2025

CVE-2025-22150 - The Predictable Boundary Flaw in Undici http/1.1 Client (Exploit Breakdown & Fixes)

CVE-2025-22150 highlights how even popular and widely used Node.js libraries can fall to security lapses when basic randomness is underestimated. This exclusive long-read explains

Jan 21, 2025 API PHP

CVE-2025-24011 - Information Disclosure in Umbraco CMS UserExistance via API Timing Attack

In June 2025, a new vulnerability has been disclosed for the Umbraco .NET content management system (CMS), tracked as CVE-2025-24011. This issue affects all releases

Jan 21, 2025

CVE-2025-0377 - Exploiting the Zip-Slip Vulnerability in HashiCorp’s go-slug Library

On January 5, 2025, a major vulnerability surfaced in the open-source ecosystem: CVE-2025-0377, impacting HashiCorp’s go-slug library. This flaw exposes applications to a variant

Jan 21, 2025 WordPress Exploit SQL PHP

CVE-2025-22710 - Blind SQL Injection in StoreApps Smart Manager (Up to v8.52.) – Deep Dive and Exploit Example

Published: June 2024 CVE: CVE-2025-22710 Affected Product: StoreApps Smart Manager (for WooCommerce) Vulnerable Versions: All versions up to and including 8.52. Vulnerability Type: Blind