CVE-2025-42999: Insecure Deserialization in SAP NetWeaver Visual Composer
CVE-2025-42999 is a critical deserialization vulnerability in SAP NetWeaver Visual Composer, allowing code execution via malicious metadata…
Karl.Fail
Vulnerabilities
Vulnerability notes, technical breakdowns, and security research.
CVE-2025-43561: Critical Authorization Vulnerability in Adobe ColdFusion
CVE-2025-43561 is a critical flaw in Adobe ColdFusion allowing high-privileged attackers to bypass authorization and execute arbitrary…
CVE-2025-43564: Critical Authorization Flaw in Adobe ColdFusion
CVE-2025-43564 is a critical authorization flaw in Adobe ColdFusion allowing high-privileged attackers to read or alter sensitive…
CVE-2025-43567: Critical Reflected XSS Vulnerability in Adobe Connect
CVE-2025-43567 is a critical reflected XSS vulnerability in Adobe Connect that can lead to session hijacking and data…
CVE-2025-43562: Critical OS Command Injection in Adobe ColdFusion
CVE-2025-43562 is a critical OS command injection vulnerability in Adobe ColdFusion, allowing high-privilege attackers to execute arbitrary…
CVE-2025-43560: Critical Input Validation Flaw in Adobe ColdFusion
CVE-2025-43560 exposes a critical input validation flaw in Adobe ColdFusion, enabling remote code execution by privileged…
CVE-2025-43563: Critical Access Control Flaw in Adobe ColdFusion
CVE-2025-43563 is a critical vulnerability in Adobe ColdFusion that allows unauthorized file system access due to improper access…
CVE-2025-43559: Critical Input Validation Vulnerability in Adobe ColdFusion
Adobe ColdFusion versions 2021.19 and earlier are affected by CVE-2025-43559, a critical input validation flaw allowing remote code…
CVE-2025-43858: Critical Command Injection in YoutubeDLSharp on Windows
CVE-2025-43858 in YoutubeDLSharp enables command injection on Windows systems due to unsafe argument handling. Affected users should upgrade…
CVE-2025-29827: Critical Privilege Escalation in Azure Automation
Microsoft discloses CVE-2025-29827, a critical Azure Automation vulnerability that allows privilege escalation via improper…
CVE-2025-29813: Critical Privilege Escalation in Azure DevOps Server
A critical flaw in Azure DevOps Server enables attackers to bypass authentication and escalate privileges via spoofed identity…
CVE-2025-29972: Critical SSRF Vulnerability in Azure Storage Resource Provider
CVE-2025-29972 is a critical SSRF flaw in Azure Storage Resource Provider allowing spoofing attacks via network-accessible…