CVE-2025-1385 - ClickHouse library-bridge RCE – How Local API & Table Engine Lead to Arbitrary Code Execution
ClickHouse is a widely used high-performance columnar database, popular for analytics and big data workloads. But with great power comes great responsibility — and sometimes, serious
CVE-2025-27784 - Applio Arbitrary File Read Leads to SSRF Data Exfiltration
Published: June 2024
Author: [Your Name]
Overview
Applio is an open-source voice conversion toolkit, popular among hobbyists and professionals seeking to transform and manipulate voice
CVE-2025-27777 - Applio SSRF Vulnerability Exposes Internal Networks via Unprotected Model Download
Summary
A serious security issue has been discovered in Applio, an open source voice conversion tool. Versions 3.2.7 and earlier are vulnerable to
CVE-2025-2476 - Critical “Use-after-free” in Lens allows Remote Attack on Google Chrome (prior to 134..6998.117)
Google Chrome has always been one of the most popular web browsers, but with popularity comes attention from attackers. Recently, a critical “use-after-free” vulnerability (CVE-2025-2476)
CVE-2025-29926 - How Unauthenticated Users Can Take Over XWiki Farms via the WikiManager REST API
CVE-2025-29926 is a critical security vulnerability affecting the XWiki Platform's WikiManager REST API. It allows anyone with network access to exploit this API
Episode
00:00:00
00:00:00