Exploit - CVE CyberSecurity Database News (Page 67)

CVE-2025-21191 - Exploiting a TOCTOU Race Condition in Windows LSA for Local Privilege Escalation

Apr 8, 2025 Windows Microsoft API Exploit

CVE-2025-21191 - Exploiting a TOCTOU Race Condition in Windows LSA for Local Privilege Escalation

In early 2025, a significant vulnerability was found in the Windows Local Security Authority (LSA). Tagged CVE-2025-21191, this bug is a classic Time-Of-Check Time-Of-Use (TOCTOU)

Apr 8, 2025 Exploit

CVE-2025-27082 - Arbitrary File Write Vulnerabilities in AOS-10 GW and AOS-8 Controller/Mobility Conductor – Detailed Analysis, Exploit Code, and Mitigation

--- Summary In mid-2025, researchers identified a severe vulnerability—tracked as CVE-2025-27082—impacting the web-based management interfaces of Aruba’s AOS-10 Gateway (GW) and AOS-8

Apr 8, 2025 Exploit Java

CVE-2024-52981 - Exploiting Elasticsearch Stack Overflow Through Recursive GeometryCollection Payloads

Elasticsearch is a widely used open-source search and analytics engine that powers everything from web apps to enterprise-scale data lakes. But no software is perfect—

Apr 8, 2025 Exploit

CVE-2024-48887 - Unverified Password Change in Fortinet FortiSwitch Allows Attackers to Take Over Admin Accounts

--- Fortinet’s FortiSwitch is a widely used network switch in enterprise environments, trusted for performance and robust security. But in June 2024, a serious

Apr 8, 2025 Exploit

CVE-2024-32122 - How Fortinet FortiOS (7.2.–7.2.1) Stored Passwords Insecurely – Exploit Details and Mitigation

Published: June 2024 Author: Security Insight Overview In June 2024, a critical vulnerability was published as CVE-2024-32122, affecting Fortinet’s FortiOS, specifically versions 7.2.