CVE-2025-11931 - Integer Underflow in XChaCha20-Poly1305 Decrypt Leads to Out-of-Bounds Access
A new vulnerability, CVE-2025-11931, has been discovered in the implementation of XChaCha20-Poly1305 in several open-source cryptographic libraries. This bug specifically affects direct uses of the
CVE-2025-11001 - 7-Zip ZIP File Directory Traversal RCE Explained (with Exploit Details)
In early 2025, a new critical vulnerability was identified in the widely used 7-Zip compression software. Tracked as CVE-2025-11001 (formerly ZDI-CAN-26753), this flaw allows an
CVE-2025-58034 - Exploiting OS Command Injection in Fortinet FortiWeb (Full Guide & Code Examples)
A recently disclosed vulnerability, CVE-2025-58034, is shaking up the world of Fortinet users. This critical flaw, categorized as CWE-78: Improper Neutralization of Special Elements used
CVE-2025-10158 - Exploiting Out-of-Bounds Read in rsync with Malicious Client and Negative Array Index
Summary:
In early 2024, security researchers uncovered a bug in the popular file transfer tool, rsync, that can lead to sensitive information disclosure if exploited
CVE-2025-64756 - Command Injection in Glob CLI via `-c/--cmd` Option
*Published: 2024-06-17 | Exploitation Level: Easy | Affected Versions: glob 10.2. up to (not including) 10.5. and 11.1.*
Introduction
The glob package is one
Episode
00:00:00
00:00:00