Poster - CVE CyberSecurity Database News (Page 357)

Jan 10, 2025 Exploit Apache PHP

CVE-2025-23016 - FastCGI fcgi2 2.x–2.4.4 Remote Buffer Overflow Explained & Exploited

A newly identified security flaw, CVE-2025-23016, affects the popular FastCGI fcgi2 package (also known as fcgi) versions 2.x through 2.4.4. This vulnerability

Jan 9, 2025 Microsoft OAuth

CVE-2025-21380 - Improper Access Control in Azure SaaS Resources Enables Information Disclosure — A Deep Dive

In early 2025, Microsoft patched a new security vulnerability identified as CVE-2025-21380. This weakness, affecting certain Azure SaaS resources, allows an attacker with authorized access

Jan 9, 2025 Microsoft

CVE-2025-21385 - SSRF Vulnerability in Microsoft Purview – Details, Exploit Example, and Explanation

Published: June 2024 Author: [Your Name or Handle] What is CVE-2025-21385? CVE-2025-21385 is a Server-Side Request Forgery (SSRF) vulnerability found in Microsoft Purview. This vulnerability

Jan 9, 2025 API

CVE-2024-55225 - Critical Vaultwarden Bug Allows User and Admin Impersonation

Vaultwarden—the popular lightweight, self-hosted password manager—recently patched a critical vulnerability tracked as CVE-2024-55225. This issue, found in the src/api/identity.rs Rust

Jan 9, 2025 XSS Exploit OAuth

CVE-2024-13301 - XSS Vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) Explained

Summary: CVE-2024-13301 is a Cross-Site Scripting (XSS) vulnerability found in the popular Drupal module “OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client)