Poster - CVE CyberSecurity Database News (Page 39)

Nov 26, 2025 CSRF API

CVE-2025-66035 - XSRF Token Leak in Angular via Protocol-Relative URLs

A new critical vulnerability—CVE-2025-66035—has been found in Angular’s popular HttpClient, affecting versions prior to 19.2.16, 20.3.14, and 21.

Nov 25, 2025 XXE API Exploit

CVE-2025-58360 - How an XXE Flaw in GeoServer Exposed Sensitive Data Via GetMap Requests

GeoServer, the popular open-source geospatial server, is often used by organizations to share and visualize spatial data. In early 2025, security researchers discovered a new

Nov 21, 2025 Exploit

CVE-2025-11932 - How a Non-Constant Time PSK Binder Leak Can Break Your TLS 1.3 Security

CVE-2025-11932 is a newly disclosed vulnerability affecting certain TLS 1.3 server implementations. The issue? The server used a non-constant time method to verify the

Nov 21, 2025 API Exploit

CVE-2025-11931 - Integer Underflow in XChaCha20-Poly1305 Decrypt Leads to Out-of-Bounds Access

A new vulnerability, CVE-2025-11931, has been discovered in the implementation of XChaCha20-Poly1305 in several open-source cryptographic libraries. This bug specifically affects direct uses of the

Nov 21, 2025

CVE-2025-12888 - Timing Attack Found in X25519 Crypto Implementations on Xtensa-based ESP32 Chips

*Published: July 2024* A serious vulnerability, CVE-2025-12888, has been identified in the way X25519 cryptographic key exchange is implemented on Xtensa-based chips (notably the popular