Exploit - CVE CyberSecurity Database News (Page 150)

Feb 18, 2025 RCE Exploit Java

CVE-2025-0422 - Authenticated Remote Code Execution in "bestinformed Web" via ScriptVars

A new vulnerability tracked as CVE-2025-0422 has been discovered in the "bestinformed Web" application, exposing organizations to remote code execution (RCE)

Feb 18, 2025 XSS WordPress Exploit Google

CVE-2024-13565 - Exploiting Stored XSS in Simple Map No Api WordPress Plugin (<= v1.9)

TL;DR: The Simple Map No Api plugin for WordPress, up to and including version 1.9, has a dangerous vulnerability. If you’re letting

Feb 17, 2025 Windows Exploit

CVE-2025-0714 - How Weak Password Encryption in MobaXterm (< 25.) Puts Your Credentials at Risk

MobaXterm is a popular terminal emulator for Windows, loved by system administrators for its all-in-one capabilities—SSH client, tabbed terminal, X11 forwarding, and

Feb 17, 2025 API Exploit

CVE-2025-0001 - Authenticated Arbitrary File Read Vulnerability in Abacus ERP—Explained and Exploited

Abacus ERP powers thousands of businesses, and its security is crucial. But a recently disclosed major vulnerability, CVE-2025-0001, puts older versions of this

Feb 16, 2025 WordPress Exploit PHP

CVE-2025-26779 - How a Path Traversal Bug in Keep Backup Daily Can Put Your Files at Risk

In early 2025, security researchers uncovered a serious vulnerability—CVE-2025-26779—in a popular backup plugin called Keep Backup Daily made by Fahad Mahmood.