Exploit - CVE CyberSecurity Database News (Page 122)

Mar 4, 2025 Microsoft API Exploit

CVE-2025-27507 - Critical IDOR in ZITADEL Allows Account Takeover via LDAP Config Manipulation

ZITADEL is a widely used open-source identity and access management (IAM) solution, helping organizations manage authentication, user registration, and authorization. Designed to be flexible, secure,

Mar 4, 2025 Windows Microsoft Exploit Java

CVE-2024-11957 - Breaking Down an Unpatched Digital Signature Bug in Kingsoft WPS Office (ksojscore.dll) Enabling Arbitrary DLL Loading

Kingsoft WPS Office is a widely-used productivity suite that's especially popular in China and among users who want a free alternative to Microsoft

Mar 4, 2025 Exploit

CVE-2025-27111 - Log Injection Vulnerability in Ruby Rack Sendfile Middleware Explained

On February 27, 2025, CVE-2025-27111 was published affecting the popular Ruby library Rack, specifically its Rack::Sendfile middleware. This security vulnerability allows attackers to inject

Mar 4, 2025 Exploit

CVE-2025-1932 - Out-of-Bounds Exploit in Firefox and Thunderbird’s xslt/txNodeSorter (Full Technical Analysis)

Published: 2024-06-25 <br>Author: [YourName] Mozilla has recently disclosed a new security flaw, CVE-2025-1932, affecting the xslt/txNodeSorter code used in both Firefox

Mar 4, 2025 Exploit

CVE-2025-1933 - JIT WASM Return Value Memory Corruption in Firefox and Thunderbird (<136)

A new and significant vulnerability, CVE-2025-1933, has been discovered in Mozilla’s products, specifically targeting the Just-In-Time (JIT) compiler for WebAssembly (WASM) on 64-bit CPUs.