BeyondTrust PRA connection takeover – CVE-2025-0217

BeyondTrust PRA connection takeover – CVE-2025-0217 Full Disclosure mailing list archives BeyondTrust PRA connection takeover – CVE-2025-0217 From: Paul Szabo via Fulldisclosure Date: Wed, 7 May 2025 07:01:12 +1000 === … Read more Published Date: May 06, 2025 (2 hours, 40 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-0217 CVE-2023-23632

CVE-2025-4372 – Google Chrome WebAudio Use After Free Vulnerability

The following table lists the changes that have been made to the CVE-2025-4372 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 06, 2025 Action […]

CVE-2025-47420 – Crestron Automate VX Privilege Escalation Vulnerability

The following table lists the changes that have been made to the CVE-2025-47420 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 25b0b659-c4b4-483f-aecb-067757d23ef3 May. 06, 2025 Action […]

CVE-2025-0853 – WordPress PGS Core Plugin SQL Injection Vulnerability

CVE ID : CVE-2025-0853 Published : May 6, 2025, 10:15 p.m. | 25 minutes ago Description : The PGS Core plugin for WordPress is vulnerable to SQL Injection via the ‘event’ parameter in the ‘save_header_builder’ function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of […]

Researcher Says Patched Commvault Bug Still Exploitable

Researcher Says Patched Commvault Bug Still Exploitable Source: T.Schneider via ShutterstockCertain versions of Commvault Command Center remain open to attack via a recently disclosed maximum severity vulnerability, even in supposedly patched builds of the … Read more Published Date: May 06, 2025 (3 hours, 15 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-34028

CVE-2025-47419 – Crestron Automate VX Insecure Communication Vulnerability

The following table lists the changes that have been made to the CVE-2025-47419 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 25b0b659-c4b4-483f-aecb-067757d23ef3 May. 06, 2025 Action […]

CVE-2025-47418 – Crestron Automate VX Sensitive Information Exposure

The following table lists the changes that have been made to the CVE-2025-47418 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 25b0b659-c4b4-483f-aecb-067757d23ef3 May. 06, 2025 Action […]

CVE-2025-46573 – OpenSAMLPassport-WSFed Impersonation Vulnerability

The following table lists the changes that have been made to the CVE-2025-46573 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 06, 2025 Action […]

CVE-2025-46572 – Auth0 Passport-wsfed-saml2 SAML Authentication Bypass

The following table lists the changes that have been made to the CVE-2025-46572 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 06, 2025 Action […]

CVE-2025-44899 – Tenda RX3 Stack Overflow Vulnerability in WifiGuestSet

The following table lists the changes that have been made to the CVE-2025-44899 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 06, 2025 Action […]