CVE-2025-46661 - Exploiting Unauthenticated Remote Code Execution in IPW Systems Metazo (Analyze & Demo)
In early 2025, security researchers spotted a serious flaw (now CVE-2025-46661) in IPW Systems’ Metazo software, affecting all versions through 8.1.3. This vulnerability
CVE-2025-42598 - How EPSON Printer Drivers for Windows Can Lead to SYSTEM Privilege Escalation
---
Summary
A newly discovered vulnerability—CVE-2025-42598—has drawn attention to SEIKO EPSON printers. If you have installed EPSON printer drivers on a Windows computer,
CVE-2025-22235 - Security Bypass in Spring Security EndpointRequest.to() When Endpoint is Disabled or Not Exposed
In early 2025, a new vulnerability was assigned as CVE-2025-22235, affecting applications that rely on Spring Security to protect application endpoints. This particular weakness is
CVE-2024-9771 - How a Stored XSS in WP-Recall Plugin Let Admins Attack WordPress Sites Even Without “Unfiltered HTML”
A significant security bug, tracked as CVE-2024-9771, was discovered in the popular WP-Recall WordPress plugin. This vulnerability affects all versions before 16.26.12. What
CVE-2024-13688 - How A Hardcoded Password in Admin and Site Enhancements (ASE) Plugin Let Attackers Sneak Past WordPress Protection
WordPress is an incredible platform, but its popularity makes it a favorite target for hackers. Security plugins are designed to keep your site safe, but
Episode
00:00:00
00:00:00