CVE-2024-1539 - How a GitLab API Info Leak Let Banned Group Members See Issue Updates
---
Intro: What is CVE-2024-1539?
CVE-2024-1539 is a newly discovered vulnerability in GitLab's Enterprise Edition (EE) that impacts a wide
CVE-2025-1028 - Remote Code Execution via Arbitrary File Upload in Contact Manager for WordPress (up to 8.6.4)
On June 13, 2024, a serious vulnerability—CVE-2025-1028—was disclosed in the popular “Contact Manager” WordPress plugin, affecting all versions up to, and
CVE-2025-0413 - Parallels Desktop Local Privilege Escalation via Technical Data Reporter (ZDI-CAN-25014) – Exploit Explained
Parallels Desktop is one of the most popular tools for running virtual machines on macOS. However, in its widespread use, it’s not immune to
CVE-2025-24964 - Critical Remote Code Execution in Vitest via Cross-site WebSocket Hijacking
Vitest is a popular testing framework built on top of Vite. With its blazing speed and developer-friendly features, it’s become a go-to
CVE-2025-24968 - Full System Takeover in reNgine via Unrestricted Project Deletion Vulnerability
reNgine is a well-known open-source automated reconnaissance framework used primarily for web application security assessments. On June 2025, a critical vulnerability, CVE-2025-
Episode
00:00:00
00:00:00