Exploit - CVE CyberSecurity Database News (Page 2)

Mar 25, 2025 Exploit

CVE-2025-2725 - Critical Vulnerability Found in H3C Magic Series Devices Allowing Command Injection via HTTP POST Request Handler

A vulnerability, classified as critical, has been discovered in H3C Magic series devices, including Magic NX15, Magic NX30 Pro, Magic NX400, Magic R301, and Magic

Mar 25, 2025 Exploit

CVE-2025-24514 - Critical Security Vulnerability in ingress-nginx Allows for Arbitrary Code Execution and Secret Disclosure

A critical security vulnerability (CVE-2025-24514) has been discovered in the popular ingress-nginx project (https://github.com/kubernetes/ingress-nginx). This vulnerability allows attackers to exploit the

Mar 25, 2025 API Exploit

CVE-2025-24513 - Security Issue Detected in Ingress-NGINX: Directory Traversal Vulnerability, Potential DoS, and Limited Secret Disclosure

A serious security vulnerability, associated with CVE-2025-24513, has been found in the ingress-nginx project (https://github.com/kubernetes/ingress-nginx). This vulnerability exists within the ingress-nginx

Mar 25, 2025 Exploit

CVE-2025-1097 - Exploiting Arbitrary Code Execution in ingress-nginx through 'auth-tls-match-cn' Annotation Injection

Overview A recently disclosed vulnerability (CVE-2025-1097) has been identified in the popular Kubernetes Ingress plugin, ingress-nginx (https://github.com/kubernetes/ingress-nginx). Due to a severe

Mar 24, 2025 Exploit

CVE-2025-26512: SnapCenter versions prior to 6..1P1 and 6.1P1 vulnerable to privilege escalation allowing SnapCenter Server user to become a remote admin

In this long-read post, we will discuss a recently discovered vulnerability, CVE-2025-26512, affecting SnapCenter versions prior to 6..1P1 and 6.1P1. This vulnerability allows