CVE CyberSecurity Database News (Page 251)

Feb 13, 2025 API

CVE-2024-57378 - Broken Access Control in Wazuh SIEM 4.8.2 Exposes Undocumented User Creation Flaw

Author: AI Security Editorial Date: July 2024 Wazuh SIEM is an open-source security information and event management platform trusted by thousands of organizations. But

Feb 13, 2025 RCE

CVE-2023-34399 - How a Boost Library Vulnerability Exposed Mercedes-Benz Head Units (NTG6) to USB Exploitation

Mercedes-Benz vehicles are known for luxury and innovation. Their infotainment systems are cutting-edge, providing seamless user experiences. However, even the most advanced tech

Feb 13, 2025 RCE

CVE-2023-34398 - Mercedes-Benz NTG6 Head-Unit USB Profile Import – A Deep Dive into the Boost Library Vulnerability

Mercedes-Benz cars are often seen as luxury vehicles packed with the latest tech. But, like any high-tech device, they can also have security

Feb 13, 2025 Exploit

CVE-2025-1127 - How Attackers Can Execute Arbitrary Code & Modify Any Files as an Unprivileged User

In early 2025, security researchers uncovered a severe vulnerability—CVE-2025-1127—that affects millions of Linux systems worldwide. This flaw grants attackers the ability

Feb 13, 2025

CVE-2025-24888 - Code Execution Vulnerability in SecureDrop Client via Malicious Server

Summary: A critical vulnerability, CVE-2025-24888, was discovered in the SecureDrop Client—a desktop application used in newsrooms for secure source communication. This flaw,