Exploit - CVE CyberSecurity Database News (Page 133)

Feb 28, 2025 XSS Exploit

CVE-2025-22270 - Exploiting HTML Injection in CyberArk Endpoint Privilege Manager’s Role Management Panel

--- Overview A new vulnerability, designated CVE-2025-22270, was discovered in CyberArk Endpoint Privilege Manager SaaS version 24.7.1. This security issue resides in

Feb 28, 2025 WordPress Exploit

CVE-2024-10860 - How NextMove Lite’s Missing Check Lets Subscribers Submit Uninstall Reasons on WooCommerce Sites

CVE-2024-10860 sheds light on a common but risky oversight in WordPress plugin development: missing access control on important actions. This time, the plugin

Feb 28, 2025 Mac Exploit

CVE-2025-1413 - DaVinci Resolve for MacOS Vulnerable to Dylib Hijacking via 777 File Permissions

--- Summary: A critical security flaw (CVE-2025-1413) has been discovered in DaVinci Resolve for macOS, where the application’s directory and files are installed

Feb 28, 2025 WordPress API Exploit

CVE-2024-13796 - How a WordPress Plugin Exposed User Emails & Sensitive Info

WordPress powers millions of websites, and plugins make it even more powerful. But even popular plugins can have serious bugs. This is the case with

Feb 28, 2025 API Exploit MITM

CVE-2025-25728 - Bosscomm IF740 Firmware Leak Exposes Sensitive Data in Plaintext API Calls

In early 2025, cybersecurity researchers disclosed a critical vulnerability—CVE-2025-25728—in the Bosscomm IF740 IoT device. This problem affects devices running Firmware versions