CVE-2025-4641: Critical XXE Vulnerability in WebDriverManager
CVE-2025-4641 is a critical XXE vulnerability in WebDriverManager affecting versions before 6.0.2, allowing remote exploitation via malicious…
Karl.Fail
Vulnerabilities
Vulnerability notes, technical breakdowns, and security research.
Critical Authorization Vulnerability in Adobe Commerce (CVE-2025-24434)
CVE-2025-24434 allows privilege escalation in Adobe Commerce via incorrect authorization. Affected versions should be patched…
Authentication Bypass in PAM-PKCS#11 due to Weak Default `cert_policy` Setting
A critical flaw in PAM-PKCS#11 allows attackers to bypass authentication by exploiting default configuration…
Critical Deserialization Vulnerability in Adobe ColdFusion (CVE-2025-24447)
CVE-2025-24447 in Adobe ColdFusion allows unauthenticated remote code execution via deserialization. Critical risk, patch…
Critical Improper Input Validation Vulnerability in Adobe ColdFusion (CVE-2025-24446)
CVE-2025-24446 affects Adobe ColdFusion and allows remote code execution through improper input…
Critical RCE Vulnerability in Tauri Plugin Shell (CVE-2025-31477)
CVE-2025-31477 is a critical flaw in the Tauri shell plugin allowing untrusted protocol execution via the open endpoint. Patch to v2.2.1…
Code Injection Vulnerability in SAP Landscape Transformation (SLT)
CVE-2025-31330 enables code injection via RFC in SAP SLT, risking full system compromise. Affected users must patch…
CVE-2025-31324: Critical File Upload Vulnerability in SAP NetWeaver Visual Composer
CVE-2025-31324 allows unauthenticated attackers to upload malicious binaries to SAP NetWeaver, risking total system…
Critical Authorization Flaw in Oracle Agile PLM Framework (CVE-2025-21556)
CVE-2025-21556 affects Oracle Agile PLM Framework, allowing low-privileged attackers to take over systems due to incorrect authorization…
Critical Windows OLE Remote Code Execution Vulnerability (CVE-2025-21298)
CVE-2025-21298 is a critical Windows OLE vulnerability allowing unauthenticated remote code execution due to a use-after-free…
Critical Remote Takeover Vulnerability in JD Edwards EnterpriseOne Tools (CVE-2025-21524)
CVE-2025-21524 is a critical vulnerability in JD Edwards EnterpriseOne Tools allowing remote takeover via unauthenticated HTTP…
Critical Remote Takeover Vulnerability in Oracle WebLogic Server (CVE-2025-21535)
CVE-2025-21535 is a critical flaw in Oracle WebLogic Server allowing remote, unauthenticated attackers to fully compromise the…