CVE CyberSecurity Database News (Page 258)

Feb 12, 2025 API Exploit

CVE-2025-1042 - Uncovering GitLab’s Repository Exposure Flaw (Easy Exploit Guide & Fix)

In early 2025, the security community started buzzing about a critical vulnerability in GitLab Enterprise Edition (EE). Registered as CVE-2025-1042, this flaw is

Feb 12, 2025 XSS

CVE-2025-0376 - Serious XSS Vulnerability in GitLab (13.3 to 17.8.1) and How It Can Be Exploited

A critical Cross-Site Scripting (XSS) vulnerability was discovered in GitLab CE/EE (Community and Enterprise Edition). This flaw, tracked as CVE-2025-0376, lets

Feb 12, 2025 API Exploit

CVE-2024-12379 - How Attackers Crash GitLab with Unbounded Symbol Creation

In early 2024, CVE-2024-12379 was announced, highlighting a dangerous Denial of Service (DoS) flaw in GitLab Community Edition (CE) and GitLab Enterprise Edition

Feb 12, 2025 API PHP

CVE-2025-26357 - Path Traversal Vulnerability in Q-Free MaxTime ≤ 2.11. (Exploit & Technical Breakdown)

CVE-2025-26357 is a critical Path Traversal vulnerability (CWE-35) discovered in the Q-Free MaxTime traffic management software, affecting all versions up to

Feb 12, 2025

CVE-2025-21699 - Inside the Linux Kernel’s gfs2 Flag Flaw (With Code and Exploit Details)

In early 2025, the Linux kernel team resolved a potentially dangerous vulnerability in the gfs2 filesystem. Tracked as CVE-2025-21699, this bug stemmed from