Exploit - CVE CyberSecurity Database News (Page 42)

May 22, 2025 Windows Microsoft Exploit

CVE-2025-47181 - How Misplaced Link-Following in Microsoft Edge Lets Attackers Sneak In

A new security weakness surfaced in Microsoft Edge (Chromium-based) earlier this year, tracked as CVE-2025-47181. In simple terms, Edge fails to properly check shortcut links

May 22, 2025 API Exploit

CVE-2025-0993 - GitLab CE/EE Resource Exhaustion Denial-of-Service (DoS) Vulnerability Explained

Published: June 2024 Severity: Moderate Affected Products: GitLab Community Edition (CE) and Enterprise Edition (EE) Versions: All versions before 17.10.7, 17.11 before

May 22, 2025 XSS Exploit

CVE-2025-4123 - Chained Path Traversal & Open Redirect Leads to XSS & SSRF in Grafana

A newly identified security flaw, CVE-2025-4123, exposes the popular monitoring dashboard Grafana to risk of both cross-site scripting (XSS) and server-side request forgery (SSRF) attacks.

May 21, 2025 RCE Exploit

CVE-2025-34027 - Remote Code Execution via Authentication Bypass and Race Condition in Versa Concerto SD-WAN

CVE-2025-34027 is a critical vulnerability affecting Versa Concerto SD-WAN orchestration platforms, specifically versions 12.1.2 through 12.2. (and potentially others). The flaw lies

May 21, 2025 API Exploit

CVE-2025-40775 - BIND TSIG Algorithm Assertion Failure Leads to Crash (Exploit Details Inside)

In June 2025, security researchers disclosed CVE-2025-40775, a high-impact vulnerability in BIND, the world’s most popular DNS server software. If you run BIND 9.