Poster - CVE CyberSecurity Database News (Page 391)

Jan 8, 2025 PHP

CVE-2025-22145 - How a Simple Locale Setting in Carbon Can Lead to Arbitrary File Include in PHP Applications

Table of Contents Introduction In early 2025, security researchers discovered a serious vulnerability in the Carbon PHP extension for date and time handling. Labeled CVE-

Jan 8, 2025 API Exploit

CVE-2025-0194 - GitLab Token Exposure Vulnerability Explained (With Exploit Details & Code Example)

GitLab is one of the most widely used platforms for code hosting, CI/CD pipelines, and team collaboration. Security in such systems is critical, especially

Jan 8, 2025 Exploit Chrome

CVE-2025-0291 - How Type Confusion in Chrome's V8 Engine Lets Attackers Run Code in Your Browser

It’s 2025, and Chrome is still the world’s most popular web browser, but it’s not invulnerable. A recent vulnerability, CVE-2025-0291,

Jan 8, 2025 Exploit

CVE-2024-56785 - The Loongson64 PCIe Device Tree Bug in Linux Kernel (Explained with Code and Exploit Details)

In early 2024, a flaw was discovered in the device tree files (DTS) for Loongson64 systems in the Linux kernel. Identified as CVE-2024-56785,

Jan 8, 2025

CVE-2024-56786 - Use-After-Free Vulnerability in Linux Kernel’s BPF Link Handling

A new vulnerability, CVE-2024-56786, has been identified and resolved in the Linux kernel BPF (Berkeley Packet Filter) subsystem. This issue concerns the lifetime