CVE CyberSecurity Database News (Page 96)

Apr 25, 2025 Windows Exploit

CVE-2025-3935 - ScreenConnect ViewState Injection Vulnerability Explained

ScreenConnect, a popular remote support tool, faces a new security buzz with the identification of CVE-2025-3935. This technical post unpacks what this vulnerability

Apr 25, 2025 RCE Windows Exploit PHP

CVE-2025-3928 - Commvault Web Server Webshell Vulnerability Explained (with Exploit Details)

Commvault is a popular data protection and information management platform, used by enterprises worldwide for backup and recovery. It offers a web-based interface that

Apr 25, 2025 RCE PHP

CVE-2025-32432 - Remote Code Execution in Craft CMS – Deep Dive, Exploit, and Protection

Craft CMS is a popular and powerful content management system used by developers for custom websites and digital experiences. Its flexibility, plugin support, and intuitive

Apr 25, 2025 RCE API Exploit PHP

CVE-2025-46616 - Remote Code Execution in Quantum StorNext Web GUI API (Pre-7.2.4) — File Upload Exploit Guide

A newly identified vulnerability, CVE-2025-46616, puts users of Quantum StorNext’s Web GUI API (prior to 7.2.4) at risk of remote

Apr 25, 2025

CVE-2025-46599 - K3s Kubernetes kubelet Exposes ReadOnlyPort 10255 and Leaks Cluster Secrets

In early 2025, a critical vulnerability identified as CVE-2025-46599 was discovered in K3s, the CNCF-certified lightweight Kubernetes distribution. This issue affects K3s