Exploit - CVE CyberSecurity Database News (Page 100)

Mar 25, 2025 Exploit

CVE-2025-2725 - Critical Command Injection in H3C Magic NX Series Routers

TL;DR: A critical remote command injection vulnerability (CVE-2025-2725) was found in several H3C Magic routers, including the NX15, NX30 Pro, NX400, R301,

Mar 25, 2025 RCE Exploit

CVE-2025-24514 - Critical RCE Exploit in ingress-nginx via `auth-url` Annotation — Details, PoC, and Protections

--- A new and severe security vulnerability, tracked as CVE-2025-24514, has been found in the popular ingress-nginx controller for Kubernetes. This vulnerability lets

Mar 25, 2025 Exploit

CVE-2025-1098 - Ingress-NGINX Annotation Vulnerability Lets Attackers Inject Code and Steal Kubernetes Secrets

Kubernetes users often depend on the popular ingress-nginx controller to expose HTTP and HTTPS routes from outside the cluster to services within. While ingress-

Mar 25, 2025 Exploit

CVE-2025-1097 - Ingress-NGINX `auth-tls-match-cn` Annotation Bypass—Arbitrary Code Execution & Secret Leakage

Published: June 2024 Product affected: Kubernetes Ingress-NGINX CVE: CVE-2025-1097 A newly disclosed vulnerability (CVE-2025-1097) in Kubernetes’ Ingress-NGINX controller allows

Mar 24, 2025 API Exploit

CVE-2025-26512 - SnapCenter Privilege Escalation Vulnerability Explained & Exploited

NetApp’s SnapCenter is a popular backup and management tool used by enterprises worldwide to safeguard applications, databases, and files. But in early 2025, cybersecurity