CVE CyberSecurity Database News (Page 167)

Mar 20, 2025 API Exploit

CVE-2024-12720 - Deep Dive into a ReDoS Flaw in huggingface/transformers (v4.46.3)

The world of machine learning relies heavily on open source libraries for productivity and performance. Hugging Face's transformers is one of the most

Mar 20, 2025 WordPress Exploit

CVE-2024-9052 - Understanding a Rejected CVE—What It Means (and What It Doesn't)

Sometimes, when you look up a Common Vulnerabilities and Exposures (CVE) identifier like CVE-2024-9052, you’ll see a message that says: > "

Mar 20, 2025 WordPress Exploit PHP

CVE-2025-2505 - Age Gate WordPress Plugin – Local PHP File Inclusion Vulnerability Exploit Guide

Published: July 2024 *By: WP Security Labs Exclusive* Summary A critical vulnerability (CVE-2025-2505) has been discovered in the Age Gate WordPress plugin – one

Mar 20, 2025 RCE API Exploit SQL

CVE-2025-1385 - ClickHouse library-bridge RCE – How Local API & Table Engine Lead to Arbitrary Code Execution

ClickHouse is a widely used high-performance columnar database, popular for analytics and big data workloads. But with great power comes great responsibility — and sometimes,

Mar 20, 2025

CVE-2025-22228 - BCryptPasswordEncoder.matches() Vulnerability – How Passwords Longer Than 72 Characters Can Bypass Security

If you're using Spring Security and rely on BCryptPasswordEncoder, you need to pay attention to CVE-2025-22228. This vulnerability makes it possible