CVE-2025-4632: Critical Path Traversal Vulnerability in Samsung MagicINFO 9 Server
CVE-2025-4632 is a critical path traversal vulnerability in Samsung MagicINFO 9 Server before version 21.1052, allowing arbitrary file writes as…
Karl.Fail
Vulnerabilities
Vulnerability notes, technical breakdowns, and security research.
CVE-2025-4318: Critical Eval Injection Vulnerability in AWS Amplify Studio
CVE-2025-4318 reveals a critical Eval Injection flaw in AWS Amplify Studio, enabling arbitrary JavaScript execution during component…
CVE-2025-24977: Critical Code Injection Vulnerability in OpenCTI
CVE-2025-24977 reveals a critical code injection flaw in OpenCTI. Exploiting it enables command execution and secret access on affected…
CVE-2025-24032: Authentication Bypass in PAM-PKCS#11 Due to Insecure Default `cert_policy` Setting
CVE-2025-24032 affects PAM-PKCS#11, allowing authentication bypass via insecure default settings. Update to version 0.6.13 or configure…
CVE-2025-21556: Critical Authorization Flaw in Oracle Agile PLM Framework
CVE-2025-21556 is a critical authorization flaw in Oracle Agile PLM Framework allowing remote takeover via incorrect access…
CVE-2025-21547: Critical Remote Exploit in Oracle Hospitality OPERA 5
CVE-2025-21547 is a critical vulnerability in Oracle Hospitality OPERA 5 that allows remote unauthenticated data access and denial of…
CVE-2025-21535: Critical Unauthenticated Remote Exploit in Oracle WebLogic Server
CVE-2025-21535 is a critical remote exploit in Oracle WebLogic Server allowing unauthenticated takeover via T3/IIOP…
CVE-2025-21524: Critical Unauthenticated Remote Takeover in JD Edwards EnterpriseOne Tools
CVE-2025-21524 is a critical unauthenticated remote takeover vulnerability in Oracle JD Edwards EnterpriseOne Tools prior to version…
CVE-2025-21415: Critical Privilege Escalation in Azure AI Face Service
CVE-2025-21415 is a critical authentication bypass in Azure AI Face Service that allows privilege escalation via…
CVE-2025-21311: Critical Elevation of Privilege in Windows NTLM V1
CVE-2025-21311 is a critical vulnerability in NTLMv1 allowing privilege escalation in Windows Server and Windows 11…
CVE-2025-21307: Critical Remote Code Execution in Windows RMCAST Driver
CVE-2025-21307 is a critical Use After Free vulnerability in the Windows RMCAST driver, allowing remote code execution across multiple…
CVE-2025-21307: Critical Remote Code Execution in Windows RMCAST Driver
CVE-2025-21307 is a critical RCE in Windows RMCAST driver, impacting numerous versions with a CVSS score of…