CVE CyberSecurity Database News (Page 170)

Mar 19, 2025 Exploit

CVE-2024-10442 - Off-by-One Vulnerability in Synology Replication Service – Exploit & Analysis

A serious security flaw, CVE-2024-10442, was discovered in the transmission component of Synology’s Replication Service and Unified Controller (DSMUC). This off-by-

Mar 19, 2025 RCE XSS Exploit

CVE-2024-10441 - How Improper Output Encoding in Synology BSM and DSM Puts Your Data at Risk

Let’s break down a critical new vulnerability, CVE-2024-10441, that targets Synology’s popular BeeStation Manager (BSM) and DiskStation Manager (DSM) systems. If

Mar 18, 2025 SQL

CVE-2025-24799 - Critical SQL Injection in GLPI Inventory Endpoint – How Attackers Exploit and How to Stay Safe

GLPI is one of the world's most popular open-source asset and IT management systems. Many sysadmins and IT teams rely on it

Mar 18, 2025 API

CVE-2025-29907 - High CPU DoS Vulnerability in jsPDF via Image Data URLs

jsPDF is a popular JavaScript library for generating PDF files in the browser and server-side JavaScript environments like Node.js. It's widely

Mar 18, 2025

CVE-2024-56347 - IBM AIX 7.2/7.3 nimsh Service Remote Command Execution via Broken SSL/TLS Controls

In June 2024, a serious vulnerability—CVE-2024-56347—was made public, affecting the nimsh service on IBM AIX 7.2 and 7.3 systems.