Do Son NVIDIA has issued a high-severity security update for a flaw (CVE-2025-23307) in NeMo Curator. The vulnerability allows code injection and could compromise AI training pipelines.
code-injection
SAP’s August 2025 Patch Day fixes critical code injection flaws in S/4HANA and SLT that could allow full ERP compromise via RFC exploits.
A critical CI/CD flaw in remote caches allows undetectable code injection and privilege escalation via cache poisoning, bypassing all security controls.
ConnectWise addresses a critical ViewState code injection flaw in ScreenConnect. If machine keys are compromised, RCE is possible. Update immediately!
A critical vulnerability (CVE-2025-3248) in Langflow allows unauthenticated remote attackers to fully compromise servers. Users are urged to upgrade to version 1.3.0 or restrict network access
A vulnerability (CVE-2024-12556) in Kibana allows code injection via prototype pollution, file upload, and path traversal. Upgrade to the latest version or disable the integration assistant to mitigate this high-severity security risk.
The SAP April 2025 Security Patch Day addresses critical code injection vulnerabilities in SAP S/4HANA and SLT, along with other important security updates
Discover Glutton, a new generation PHP backdoor that poses a threat to organizations and the cybercrime ecosystem. Learn how it blends modularity with strategic subterfuge.
A PoC exploit for SharePoint Pre-Auth Code Injection RCE chain has been released for two vulnerabilities (CVE-2023-29357 & CVE-2023-24955)