CVE-2025-27610 - Path Traversal in Ruby Rack’s Static File Server (Rack::Static) – How Attackers Can Read Sensitive Files
Published: June 2024
*By SecHub Team*
Overview
Rack is a popular Ruby interface for web servers and frameworks, acting as the backbone for frameworks like
CVE-2025-25977 - Remote Code Execution in canvg v4..2 via StyleElement Constructor
A new critical security flaw, CVE-2025-25977, has been discovered in canvg, a popular JavaScript library for rendering SVGs on Canvas. This vulnerability affects version v4.
CVE-2025-26643 - How a UI Mishap in Microsoft Edge Lets Attackers Spoof You Over the Network
Microsoft Edge, built on the Chromium engine, brought a faster and more secure web experience to Windows users. However, even the most robust browsers can
CVE-2025-1426 - Heap Buffer Overflow in GPU on Google Chrome for Android Explained
CVE-2025-1426 is a recently disclosed security vulnerability found in the GPU component of Google Chrome for Android. It affects Chrome versions earlier than 133..6943.
CVE-2025-0762 - How “Use After Free” in Google Chrome DevTools Prior to v132..6834.159 Risks Your Security
There’s a new Chrome bug on the block: CVE-2025-0762. And even though it’s somewhat under the radar, it could let hackers mess with
Episode
00:00:00
00:00:00