CVE-2024-47081 - Critical Credential Leak in Python Requests Library – How to Protect Yourself
Summary:
A severe vulnerability—CVE-2024-47081—affecting the popular Python Requests HTTP library has been discovered. Anyone using Requests versions *before* 2.32.4 could unknowingly
CVE-2025-48493 - Sensitive Redis AUTH Credentials Logged in Plain Text by Yii2 Redis Extension
If you build web applications using the PHP Yii2 framework, you might use the Yii2 Redis extension to connect your app to a Redis database.
CVE-2025-48951 - Insecure Deserialization in Auth-PHP SDK — How Malicious Cookies Can Compromise Your PHP App
A serious vulnerability (CVE-2025-48951) has been discovered in Auth-PHP, an SDK used for authentication and user management with Auth. If your app uses Auth-PHP versions
CVE-2025-25022 - Info Leak in IBM QRadar Suite & Cloud Pak for Security – Exploit & Analysis
A new critical vulnerability, CVE-2025-25022, has shaken the cybersecurity world. This flaw affects IBM QRadar Suite Software versions 1.10.12. through 1.11.2.
CVE-2025-4517 - Arbitrary Filesystem Write via Python `tarfile` Extraction with `filter="data"`
A new vulnerability, CVE-2025-4517, has been discovered in Python’s popular tarfile module. This issue allows attackers to write arbitrary files anywhere on your filesystem
Episode
00:00:00
00:00:00