Vulnerability Archives • Page 17 of 173 • Daily CyberSecurity

Critical SQL Injection Vulnerability Found in ADOdb PHP Library – CVE-2025-46337 (CVSS 10.0)

Critical SQL Injection Vulnerability Found in ADOdb PHP Library – CVE-2025-46337 (CVSS 10.0)

Do Son May 5, 2025

CVE-2025-46337 is a critical SQL injection flaw in ADOdb's PostgreSQL driver. Patch to version 5.22.9 or sanitize input to avoid exploitation.

SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475 SonicWall, exploit chain

SonicWall Exploit Chain Exposes Admin Hijack Risk via CVE-2023-44221 and CVE-2024-38475

Do Son May 5, 2025

CVE-2024-38475 and CVE-2023-44221 form an exploit chain targeting SonicWall SMA appliances, enabling remote admin hijack and code execution.

CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape Apple Zero-Day CVE-2025-43529 WebKit Zero-Day, Targeted iOS Spyware Apple spyware alerts, zero-click attacks Apple, trademark lawsuit CVE-2024-54527 PoC exploit Apple, App Store

Apple Zero-Day CVE-2025-43529 WebKit Zero-Day, Targeted iOS Spyware Apple spyware alerts, zero-click attacks Apple, trademark lawsuit CVE-2024-54527 PoC exploit Apple, App Store

CVE-2025-31191: Microsoft Exposes macOS Vulnerability Allowing App Sandbox Escape

Do Son May 5, 2025

Microsoft uncovers CVE-2025-31191, a macOS sandbox escape exploiting security-scoped bookmarks. Apple patched it in March 2025.

CVE-2025-2774: Webmin Vulnerability Allows Root-Level Privilege Escalation CVE-2024-12828 CVE-2025-2774 Webmin vulnerability

CVE-2025-2774: Webmin Vulnerability Allows Root-Level Privilege Escalation

Do Son May 4, 2025

A critical vulnerability (CVE-2025-2774) in Webmin allows remote attackers to escalate privileges and execute code as root. Update to version 2.302 now.

CISA Warns Critical Flaws in KUNBUS Revolution Pi Exposing Industrial Systems to Remote Attacks KUNBUS Revolution Pi, CISA vulnerabilities

CISA Warns Critical Flaws in KUNBUS Revolution Pi Exposing Industrial Systems to Remote Attacks

Do Son May 3, 2025

CISA warns of critical flaws in KUNBUS Revolution Pi that allow remote code execution, authentication bypass, and XSS attacks in industrial systems.

CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows Couchbase Server, Local File Inclusion

CVE-2025-46619: LFI Vulnerability Affects Multiple Versions of Couchbase Server for Windows

Do Son May 2, 2025

Couchbase Server for Windows hit by LFI flaw CVE-2025-46619 (CVSS 8.7). Upgrade to 7.6.4 or 7.2.7 to prevent unauthorized file access.

SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances SonicWall, SSRF vulnerability

SonicWall Issues Patch for SSRF Vulnerability in SMA1000 Appliances

Do Son May 2, 2025

SonicWall fixes CVE-2025-2170, an SSRF flaw in SMA1000 appliances. Users urged to update to platform-hotfix 12.4.3-02925 or later to stay secure.

NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM TensorRT-LLM, NVIDIA vulnerability

NVIDIA Fixes High-Severity Vulnerability in TensorRT-LLM

Do Son May 2, 2025

NVIDIA patches CVE-2025-23245 in TensorRT-LLM, fixing a high-risk flaw that could allow code execution. Users urged to update to v0.18.2 immediately.

SonicWall Confirms Active Exploitation of SMA 100 Vulnerabilities – Urges Immediate Patching SonicWall, SMA 100 vulnerabilities

SonicWall Confirms Active Exploitation of SMA 100 Vulnerabilities – Urges Immediate Patching

Do Son May 1, 2025

SonicWall warns of active attacks on SMA 100 devices via CVE-2023-44221 and CVE-2024-38475. Users urged to update firmware immediately.

CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes Synology vulnerability CVE-2024-10442 PoC

CVE-2024-10442 (CVSS 10): Zero-Click RCE in Synology DiskStation, PoC Publishes

Do Son May 1, 2025

CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.

CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems Finit vulnerability, authentication bypass

CVE-2025-29906: Finit’s Bundled Getty Flaw Allows Authentication Bypass on Linux Systems

Do Son May 1, 2025

Finit's internal getty flaw lets users bypass /bin/login and access Linux systems without authentication. Patch to version 4.11 or use external getty.

CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure vLLM Vulnerability CVE-2026-22778 vLLM Memory Corruption, AI Inference RCE CVE-2025-29783 CVE-2025-32444 vLLM vulnerability vLLM, Remote Code Execution

vLLM Vulnerability CVE-2026-22778 vLLM Memory Corruption, AI Inference RCE CVE-2025-29783 CVE-2025-32444 vLLM vulnerability vLLM, Remote Code Execution

CVE-2025-32444 (CVSS 10): Critical RCE Flaw in vLLM’s Mooncake Integration Exposes AI Infrastructure

Do Son May 1, 2025

CVE-2025-32444 exposes vLLM’s Mooncake integration to RCE via insecure pickle deserialization over ZeroMQ. Patch to v0.8.5 now.

CISA Adds SAP NetWeaver Zero-Day CVE-2025-31324 to KEV Database SAP NetWeaver, CVE-2025-31324

CISA Adds SAP NetWeaver Zero-Day CVE-2025-31324 to KEV Database

Do Son April 30, 2025

CVE-2025-31324 in SAP NetWeaver is under active attack. A critical zero-day flaw allows unauthenticated file uploads and remote code execution.

Chrome Update Fixes High-Severity Security Flaw (CVE-2025-4096) Chrome 136, Security Update

Chrome Update Fixes High-Severity Security Flaw (CVE-2025-4096)

Do Son April 30, 2025

Chrome security update released! Patch CVE-2025-4096 and other flaws now to protect your system. Update Chrome immediately.

Unpatched Windows LNK Vulnerability Allows Attacker to Capture NTLM Hash Windows LNK UNC Path Exploit

Unpatched Windows LNK Vulnerability Allows Attacker to Capture NTLM Hash

Do Son April 30, 2025

A researcher reveals an unpatched Windows LNK flaw that allows UNC-based remote execution and NTLM hash capture. Microsoft declined to issue a fix.

High-Severity DoS Vulnerability Found in PowerDNS DNSdist (CVE-2025-30194) DNSdist vulnerability, CVE-2025-30194

High-Severity DoS Vulnerability Found in PowerDNS DNSdist (CVE-2025-30194)

Do Son April 30, 2025

Critical DoS vulnerability (CVE-2025-30194) impacts PowerDNS DNSdist 1.9.0-1.9.8 with DoH. Upgrade to 1.9.9 or use h2o provider.

Rancher Releases Patch for CVE-2024-22031 Privilege Escalation Vulnerability Rancher CVE-2024-22031 Privilege Escalation

Rancher Releases Patch for CVE-2024-22031 Privilege Escalation Vulnerability

Do Son April 30, 2025

Rancher patches CVE-2024-22031, a privilege escalation flaw allowing cross-cluster access. Update to v2.11.1, v2.10.5, or v2.9.9 to stay protected.

AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices AirPlay Vulnerability AirBorne Zero-Click RCE

AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices

Do Son April 29, 2025

Oligo reveals AirBorne flaws in Apple AirPlay protocol enabling zero-click wormable RCE across billions of Apple, CarPlay, and IoT devices.

Google: Zero-Day Exploits Shift from Browsers to Enterprise Security Tools in 2024

Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion

Google: Zero-Day Exploits Shift from Browsers to Enterprise Security Tools in 2024

Do Son April 29, 2025

Google GTIG reveals rise in zero-day exploits targeting enterprise tools, while browser and mobile vulnerabilities decline in 2024 threat landscape.

0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch Telnet Bypass Authentication Vulnerability

0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch

Do Son April 29, 2025

Critical 0-click flaw in Microsoft Telnet Server allows attackers to bypass authentication & gain admin access. Learn about the MS-TNAP vulnerability & how to mitigate

Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws Apache Tomcat CVE-2025-31650

Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws

Do Son April 29, 2025

Apache Tomcat patches CVE-2025-31650 and CVE-2025-31651 to fix denial of service and rewrite rule bypass issues. Upgrade now to stay secure.

CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases root-linux

CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases

Do Son April 29, 2025

CVE-2025-21756 exploited a tiny Linux vsock bug to achieve root access via UAF and ROP chains. Michael Hoefler reveals the full exploitation path.