Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      tRPC vs GraphQL vs REST: Choosing the right API design for modern web applications

      June 26, 2025

      Jakarta EE 11 Platform launches with modernized Test Compatibility Kit framework

      June 26, 2025

      Can Good UX Protect Older Users From Digital Scams?

      June 25, 2025

      Warp 2.0 evolves terminal experience into an Agentic Development Environment

      June 25, 2025

      The top 4 Bluetooth speakers I’m taking everywhere this summer (including a surprise pick)

      June 27, 2025

      Your Android phone is getting a big security upgrade for free – here’s what’s new

      June 27, 2025

      How a 5-minute circuit scan saved me hundreds (and exposed a serious wiring surprise)

      June 27, 2025

      Using AI saves teachers ‘six weeks per year,’ Gallup poll finds – but at what cost?

      June 27, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      billboard.js 3.16.0 release: ✨ bar trending line & improved resizing performance!

      June 27, 2025
      Recent

      billboard.js 3.16.0 release: ✨ bar trending line & improved resizing performance!

      June 27, 2025

      ISO 20022 – End of MT Coexistence for Cash Instructions Fast Approaching

      June 27, 2025

      Building Trust and Shaping the Future: Implementing Responsible AI – Part 2

      June 27, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Windows 11 KB5060826 fixes slow Search, direct download links

      June 27, 2025
      Recent

      Windows 11 KB5060826 fixes slow Search, direct download links

      June 27, 2025

      Rilasciata Tails 6.17: Più Privacy e Sicurezza con le Nuove Funzionalità

      June 27, 2025

      Rilasciata Deepin 25: La distribuzione GNU/Linux immutabile con assistente vocale e pacchetti universali

      June 27, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-52555 – Ceph File System Root Privilege Escalation

    CVE-2025-52555 – Ceph File System Root Privilege Escalation

    June 26, 2025

    CVE ID : CVE-2025-52555

    Published : June 26, 2025, 9:15 p.m. | 4 hours, 19 minutes ago

    Description : Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.

    Severity: 6.5 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2015-0849 – Pycode-Browser File Predictability Vulnerability
    Next Article CVE-2013-1440 – CVE-2022-26237: Microsoft Windows DNS Server Remote Code Execution Vulnerability

    Related Posts

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-6772 – Eosphoros-AI Db-GPT Path Traversal Vulnerability

    June 27, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-6773 – HKUDS LightRAG Path Traversal Vulnerability

    June 27, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    1fr 1fr vs auto auto vs 50% 50%

    Web Development

    CVE-2025-4821 – Cloudflare Quiche Congestion Window Overflow

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-3234 – Filester WordPress Plugin Remote File Upload Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    AMD Ryzen Chipset Driver Update 7.06.02.123 Adds CETCOMPAT Support

    Operating Systems

    Highlights

    CVE-2025-40635 – Comerzzia Backoffice: Sales Orchestrator SQL Injection Vulnerability

    May 20, 2025

    CVE ID : CVE-2025-40635

    Published : May 20, 2025, 1:15 p.m. | 1 hour, 34 minutes ago

    Description : SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete databases via the ‘uidActivity’, ‘codCompany’ and ‘uidInstance’ parameters of the ‘/comerzzia/login’ endpoint.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products

    May 8, 2025

    Rilasciata Debian 12.11: Aggiornamento di Sicurezza e Stabilità

    May 18, 2025

    How Node.js Handles Async Operations

    April 1, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.