CVE-2025-29744 – PostgreSQL pg-promise SQL Injection

June 12, 2025

CVE ID : CVE-2025-29744

Published : June 12, 2025, 4:15 p.m. | 1 hour, 50 minutes ago

Description : pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-36573 – Dell Smart Dock Firmware Information Disclosure Vulnerability

Next Article CVE-2024-7562 – InstallShield Elevated Privilege Vulnerability

Highlights

CVE-2024-52561 – Parallels Desktop for Mac Privilege Escalation Vulnerability

June 3, 2025

CVE ID : CVE-2024-52561

Published : June 3, 2025, 10:15 a.m. | 1 hour, 13 minutes ago

Description : A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change the ownership of files owned by root to a lower-privilege user, potentially leading to privilege escalation.

Severity: 7.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

How To Prevent WordPress SQL Injection Attacks

This week in AI dev tools: Apple’s Foundations Model framework, Mistral’s first reasoning model, and more (June 13, 2025)

Open Talent platforms emerging to match skilled workers to needs, study finds

Java never goes out of style: Celebrating 30 years of the language

6 registry tweaks every tech-savvy user must apply on Windows 11

Here’s why network infrastructure is vital to maximizing your company’s AI adoption

The AI video tool behind the most viral social trends right now

Got a new password manager? How to clean up the password mess you left in the cloud

Right Invoicing App for iPhone: InvoiceTemple

Right Invoicing App for iPhone: InvoiceTemple

Tunnel Run game in 170 lines of pure JS

Integrating Drupal with Salesforce SSO via SAML and Dynamic User Sync

6 registry tweaks every tech-savvy user must apply on Windows 11

6 registry tweaks every tech-savvy user must apply on Windows 11

Is Chrome Copying Edge? ‘Omnibox Tools’ Bring Edge-Style Address Bar Shortcuts

Windows 11 24H2’s new Start Menu auto-changes size based on screen resolution

CVE-2025-29744 – PostgreSQL pg-promise SQL Injection

Tenable Agent for Windows Vulnerability Let Attackers Login as Admin to Delete The System Files

Meta Invests $14.3 Billion in Scale AI, Recruits Founder Alexandr Wang for Superintelligence Lab

CVE-2025-46779 – Apache HTTP Server HTTP Header Injection

Kie.ai: Most Affordable & Stable Veo 3 API with Synced Audio

KDE Plasma 6.3.5 Update Available to Kubuntu Users

CVE-2025-46614 – Snowflake ODBC Driver Information Disclosure

CVE-2024-52561 – Parallels Desktop for Mac Privilege Escalation Vulnerability

CVE-2025-30409 – Acronis Cyber Protect Cloud Agent Denial of Service

CVE-2025-1752 – Llama Index Denial of Service Vulnerability

CVE-2025-4678 – Pandora ITSM OS Command Injection

CVE-2025-29744 – PostgreSQL pg-promise SQL Injection

Related Posts