Cyber Security Research Blogs

Vulnerable Version libblockdev & udisks2 versions before Ubuntu 2.10.1-9ubuntu3.2, Debian 2.25/2.9.4, RHEL/AlmaLinux 2.28/2.9.4, SLE 2.28/2.9.4 Fixed Version versions at or above the listed versions BaseContinue readingLocal Privilege Escalation libblockdev – CVE-2025-6019

Vulnerable Version version prior to 1.6.0 Fixed Version UPdate latest Versions Base Score 9.8 critical                                                                   Vendor Discription:- JeecgBoot is a Spring Boot–based low-code platformContinue readingJeecgBoot JimuReport FreeMarker SSTI RCE – CVE-2023-4450

Vulnerable Version Grafana versions 10.x, 11.x, and 12.x before v10.4.18+security-01, v11.2.9+security-01, v11.3.6+security-01, v11.4.4+security-01, v11.5.4+security-01, v11.6.1+security-01, and v12.0.0+security-01 Fixed Version UPdate latest Versions Base Score 7.8Continue readingXSS vulnerability in Grafana- CVE-2025-4123

Vulnerable Version before 4.0.4, 3.6.3 and 3.5.8 Fixed Version versions 4.0.4, 3.6.3, or 3.5.8 or later Base Score 9.3 critical                                                                   Vendor Discription:- Apache CXFContinue readingApache CXF Aegis DataBinding SSRF – CVE-2024-28752

Vulnerable Version versions sudo 1.9.14 – 1.9.17 Fixed Version Upgrade sudo to 1.9.17p1 or later version Base Score 9.3 critical                                                                   What is Sudo :-Continue readingSudo local privilege escalation – CVE-2025-32463

Vulnerable Version versions = 2.24 to < 2.28.19 & versions >= 3.0.0 to < 3.6.5 Fixed Version version 2.28.19 or version 3.6.5 Base Score 8.2Continue readingJumpserver account takeover – CVE-2023-42820

Vulnerable Version versions =<2.0.1 Fixed Version Update latest version Base Score 9.8 CRITICAL                                                                   Vendor Description:- Apache Superset is an open-source data visualization and explorationContinue readingApache Superset Hardcoded JWT Secret Key Leads to Authentication Bypass – CVE-2023-27524

Vulnerable Version versions 4.0.0-RC1 to 4.4.14 Fixed Version version 4.4.15 Base Score 9.8 CRITICAL                                                                   Vendor Description:- Craft CMS (Content Management System) is a flexibleContinue readingCraftCMS ConditionsController Pre-Auth RCE – CVE-2023-41892

Vulnerable Version Apache:OFBiz < 18.12.11 Fixed Version OFBiz 18.12.11 Base Score 9.8 CRITICAL                                                                   Vendor Description:- Apache OFBiz is an open-source ERP framework. It supportsContinue readingApache OFBiz Auth Bypass to RCE – CVE-2023-51467

Vulnerable Version versions 1.0.0 < 1.5.0 Fixed Version versions 1.5.0 Base Score 9.8 Critical                                                                   Vendor Description:- HugeGraph is a powerful, open-source graph database designedContinue readingApache HugeGraph JWT Auth Bypass – CVE-2024-43441