CVE-2025-27607 - Remote Code Execution via Dependency Takeover in Python JSON Logger
Between December 30, 2024, and March 4, 2025, users of Python JSON Logger were at risk of a serious vulnerability that could allow an attacker
CVE-2025-27597 - Prototype Pollution in Vue I18n Could Lead to Severe Security Risks
Vue I18n is a widely used internationalization (i18n) plugin for Vue.js. It lets developers add multilingual support to their Vue apps easily. However, a
CVE-2025-27152 - Critical SSRF and Credential Leakage in Axios via Absolute URL Handling
Axios is one of the most popular HTTP clients for JavaScript, widely used across both browser and Node.js environments. It’s often praised for
CVE-2024-13857 - Server-Side Request Forgery in WPGet API – Connect to any external REST API WordPress Plugin
A severe vulnerability has been discovered in the WPGet API – Connect to any external REST API plugin for WordPress. Tracked as CVE-2024-13857, this
CVE-2025-27816 - Insecure Deserialization in Arctera InfoScale’s Windows Plugin_Host Service
In early 2025, security researchers discovered a serious vulnerability tracked as CVE-2025-27816 in Arctera InfoScale versions 7. through 8..2. This flaw comes
Episode
00:00:00
00:00:00