CVE CyberSecurity Database News (Page 134)

Apr 7, 2025 Exploit

CVE-2025-3248 - Code Injection Vulnerability in Langflow Prior to 1.3. – Full Analysis & Exploit Example

On June 5, 2024, a major security vulnerability was identified in Langflow, a popular no-code interface for building language model-powered applications. Registered as

Apr 7, 2025 RCE Exploit Java

CVE-2025-2251 - How a Severe EJB Deserialization Flaw in WildFly & JBoss EAP Lets Attackers Execute Arbitrary Code (2025)

On June 17, 2025, a critical vulnerability was publicly disclosed in WildFly and JBoss Enterprise Application Platform (EAP), tracked as CVE-2025-2251. This vulnerability

Apr 7, 2025 API Exploit SQL Apache

CVE-2025-30473 - SQL Injection Flaw in Apache Airflow Common SQL Provider Can Lead to Privilege Escalation

A new security vulnerability, CVE-2025-30473, was discovered in the Apache Airflow Common SQL Provider (versions before 1.24.1). This flaw allows authenticated

Apr 7, 2025 Windows Microsoft API Exploit

CVE-2024-11859 - DLL Search Order Hijacking Can Lead to Malicious Code Execution by Administrators

In early 2024, security researchers discovered CVE-2024-11859, a vulnerability tied to how certain applications in Windows search and load dynamic-link libraries (DLLs)

Apr 7, 2025

CVE-2025-20654 - Out-of-Bounds Write in WLAN Service May Lead to Remote Code Execution

In early 2025, a critical vulnerability was uncovered in the WLAN service, officially identified as CVE-2025-20654. The flaw allows for a possible out-