Month: May 2025

CraftCMS ConditionsController Pre-Auth RCE – CVE-2023-41892

Vulnerable Version versions 4.0.0-RC1 to 4.4.14 Fixed Version version 4.4.15 Base Score 9.8 CRITICAL                                                                   Vendor Description:- Craft CMS (Content Management System) is a flexibleContinue readingCraftCMS ConditionsController Pre-Auth RCE – CVE-2023-41892

Cacti RRDTool Post-Auth Argument Injection – CVE-2025-24367

Vulnerable Version versions =< 1.2.28 Fixed Version versions 1.2.29 Base Score 8.7 high                                                                   Vendor Description: – Cacti is an open-source network monitoring and graphingContinue readingCacti RRDTool Post-Auth Argument Injection – CVE-2025-24367