Tag: CVE

CVE-2025-41248 & CVE-2025-41249: Vulnerabilities in Spring Framework, Spring Security Lead to Authorization Bypass, Expose Sensitive Data 3 min read CVEs CVE-2025-41248 & CVE-2025-41249: Vulnerabilities in Spring Framework, Spring Security Lead to Authorization Bypass, Expose Sensitive Data by Daryna Olyniychuk CVE-2025-10585 Vulnerability: A New Zero-Day Exploit in Chrome’s V8 JavaScript and WebAssembly Engine Weaponized in Real-World Attacks 3 min read CVEs CVE-2025-10585 Vulnerability: A New Zero-Day Exploit in Chrome’s V8 JavaScript and WebAssembly Engine Weaponized in Real-World Attacks by Veronika Zahorulko CVE-2025-7775 Vulnerability: A New Critical NetScaler RCE Zero-Day Under Active Exploitation 3 min read CVEs CVE-2025-7775 Vulnerability: A New Critical NetScaler RCE Zero-Day Under Active Exploitation by Daryna Olyniychuk CVE-2025-43300 Vulnerability: Zero-Day in iOS, iPadOS, and macOS Under Active Exploitation 3 min read CVEs CVE-2025-43300 Vulnerability: Zero-Day in iOS, iPadOS, and macOS Under Active Exploitation by Veronika Zahorulko CVE-2025-8088 Detection: WinRAR Zero-Day Is Actively Exploited in the Wild to Install RomCom Malware 4 min read CVEs CVE-2025-8088 Detection: WinRAR Zero-Day Is Actively Exploited in the Wild to Install RomCom Malware by Daryna Olyniychuk CVE-2025-8292: Use-After-Free Vulnerability in Google Chrome Leads to RCE and System Compromise 3 min read CVEs CVE-2025-8292: Use-After-Free Vulnerability in Google Chrome Leads to RCE and System Compromise by Daryna Olyniychuk CVE-2025-53770 Detection: Microsoft SharePoint Zero-Day Vulnerability Is Actively Exploited for RCE Attacks 4 min read CVEs CVE-2025-53770 Detection: Microsoft SharePoint Zero-Day Vulnerability Is Actively Exploited for RCE Attacks by Daryna Olyniychuk CVE-2025-6558 Vulnerability: Google Chrome Zero-Day Under Active Exploitation 3 min read CVEs CVE-2025-6558 Vulnerability: Google Chrome Zero-Day Under Active Exploitation by Daryna Olyniychuk CVE-2025-25257 Vulnerability: Critical SQL Injection in Fortinet FortiWeb Enables Unauthenticated Remote Code Execution 3 min read CVEs CVE-2025-25257 Vulnerability: Critical SQL Injection in Fortinet FortiWeb Enables Unauthenticated Remote Code Execution by Veronika Zahorulko CVE-2025-47981: Critical Heap-Based Buffer Overflow Vulnerability in Windows SPNEGO Extended Negotiation Leads to RCE 3 min read CVEs CVE-2025-47981: Critical Heap-Based Buffer Overflow Vulnerability in Windows SPNEGO Extended Negotiation Leads to RCE by Daryna Olyniychuk