CVE-2025-30681 - Partial Denial of Service Attack in Oracle MySQL Server Replication (8..x, 8.4.x, 9.x)
CVE-2025-30681 is a newly disclosed vulnerability affecting Oracle MySQL Server's Replication component. In this article, we break down what this vulnerability means, show
CVE-2025-32913 - Crashing Libsoup via NULL Pointer Dereference in soup_message_headers_get_content_disposition()
---
Introduction
On June 10, 2024, CVE-2025-32913 was published detailing a critical vulnerability in libsoup, a widely used HTTP client/server library for GNOME and
CVE-2024-58136 - Yii2 Behavior Attach Bypass & Wild Exploitation (Exclusive Long Read)
Intro
In the early months of 2025, security experts started noticing attacks leveraging a fresh vulnerability in Yii 2 web applications. Dubbed CVE-2024-58136, this bug
CVE-2025-27491 - Use-After-Free in Windows Hyper-V Lets Remote Attackers Execute Code
---
_Summary:_
A major security flaw—CVE-2025-27491—was found in Microsoft’s Hyper-V virtualization platform. This bug is a use-after-free vulnerability, meaning an attacker can
CVE-2025-27480 - Critical Use-After-Free in Remote Desktop Gateway Service Allows Remote Code Execution
A new, high-impact vulnerability has been discovered: CVE-2025-27480. This dangerous bug is a _use-after-free_ issue in the Remote Desktop Gateway (RD Gateway) Service. The flaw
Episode
00:00:00
00:00:00