Exploit - CVE CyberSecurity Database News (Page 37)

May 5, 2025 Exploit

CVE-2025-27920 - Directory Traversal Attack in Output Messenger Before 2..63 – How It Works, Exploit Details, and How to Stay Safe

--- What Is CVE-2025-27920? In early 2025, a serious security issue was found in Output Messenger, specifically in versions before 2..63. The vulnerability (tracked

May 5, 2025 XXE API Exploit Java

CVE-2025-2905 - XXE in WSO2 API Manager Gateway – Exploiting XML Path Injection for Data Theft and Denial of Service

Published: 2024-06-01 <br>Severity: High <br>CVSS: 8.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/

May 2, 2025 API Exploit

CVE-2025-4166 - How HashiCorp Vault kv v2 Plugin Could Leak Secrets via API – Explained

Summary: A new vulnerability, CVE-2025-4166, affects HashiCorp Vault users worldwide. Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may expose sensitive information

May 2, 2025 Microsoft Exploit

CVE-2025-29825 - User Interface (UI) Misrepresentation in Microsoft Edge Opens Doors for Spoofing Attacks

Microsoft Edge, based on Chromium, is one of the most popular web browsers. It promises users reliable security, but a newly disclosed vulnerability, CVE-2025-29825, exposes

May 1, 2025 API Exploit

CVE-2022-49931 - Kernel Crash in Linux hfi1 Driver Due to Incorrect List Handling

Summary CVE-2022-49931 is a vulnerability in the Linux kernel's hfi1 driver for Infiniband devices. It causes a kernel crash when a link goes