API - CVE CyberSecurity Database News (Page 29)

Mar 21, 2025 API

CVE-2025-25068 - How Attackers Bypass MFA in Mattermost Plugins—Exploiting MFA Weakness in Enterprise Chat

Mattermost is a popular open-source alternative to Slack, widely used in organizations for internal team messaging. Security is crucial in such environments, which is why

Mar 21, 2025 Windows Microsoft API Exploit

CVE-2025-29807 - How Deserialization in Microsoft Dataverse Can Let Attackers Run Code Remotely

Summary: On May 8, 2025, Microsoft disclosed CVE-2025-29807, a vulnerability caused by unsafe deserialization of untrusted data in Microsoft Dataverse. This flaw lets an authenticated

Mar 21, 2025 Microsoft API Exploit

CVE-2025-29814 - Improper Authorization in Microsoft Partner Center Lets Attackers Elevate Privileges

CVE-2025-29814 is a new critical vulnerability found in Microsoft Partner Center. This flaw allows attackers who already have authorized access to the network to elevate

Mar 20, 2025 API Exploit

CVE-2025-2557 - Critical Command API Vulnerability in Audi UTR Dashcam 2. — Exploit Details and Mitigation

Date: June 2024 Author: [Exclusive Content by ChatGPT] Audi’s UTR Dashcam 2. is a widely-used dashcam in many vehicles, offering real-time recording, event detection,

Mar 20, 2025 API Exploit

CVE-2025-29922 - Abusing kcp VirtualWorkspace APIs to Create and Delete Resources Without Authorization

A recently disclosed vulnerability, identified as CVE-2025-29922, affects kcp, a multi-cluster control plane that acts like Kubernetes, but supports workloads well beyond standard Kubernetes clusters.