CVE CyberSecurity Database News (Page 180)

Mar 13, 2025 Exploit Java

CVE-2020-36843: EdDSA-Java Signature Malleability Exploit in Versions through .3.

A security vulnerability has recently been discovered in the EdDSA-Java (aka ed25519-java) library, specifically in versions up to and including .3.. This vulnerability,

Mar 12, 2025

CVE-2025-25292 - How ruby-saml’s XML Parser Difference Led to SSO Authentication Bypass

ruby-saml is a popular Ruby library for supporting Security Assertion Markup Language (SAML) single sign-on (SSO). Widely used in Ruby applications, it’s

Mar 12, 2025

CVE-2025-25291 - Exploiting Authentication Bypass in ruby-saml via Signature Wrapping

CVE-2025-25291 is a newly disclosed vulnerability affecting the popular ruby-saml library for Ruby, which enables developers to integrate SAML Single Sign-On

Mar 12, 2025 RCE API GraphQL

CVE-2025-27407 - Remote Code Execution in graphql-ruby via `from_introspection` Schema Loading

A critical vulnerability was discovered in graphql-ruby, the popular Ruby library for implementing GraphQL APIs. If your application uses certain versions of graphql-ruby,

Mar 12, 2025

CVE-2025-22870 - How IPv6 Zone IDs Can Bypass Proxy Rules in NO_PROXY — Analysis & Exploit Details

Proxy settings are a critical part of modern networking security and configuration — especially when applications should avoid connecting directly to certain hosts. Environment variables like