Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out

Critical Lucee Flaw (CVE-2025-34074, CVSS 9.4): Authenticated RCE Via Scheduled Task Abuse, Metasploit Module Out

A critical security flaw has been discovered in Lucee, the high-performance, open-source CFML (ColdFusion Markup Language) application server. Tracked as CVE-2025-34074 and carrying a CVSS score of 9. …
Read more

Published Date:
Jul 04, 2025 (3 hours, 53 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-34074

CVE-2025-32432

CVE-2025-24071

CVE-2024-31819

Read More

Apache APISIX Flaw (CVE-2025-46647): Token Issuer Bypass in OpenID Connect Allows Cross-Issuer Access

Apache APISIX Flaw (CVE-2025-46647): Token Issuer Bypass in OpenID Connect Allows Cross-Issuer Access

Apache APISIX, a high-performance and AI-ready API gateway trusted for managing traffic across microservices and LLM-based applications, has been found vulnerable to a token issuer validation flaw in …
Read more

Published Date:
Jul 04, 2025 (3 hours, 42 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-46647

CVE-2022-39222

CVE-2022-24112

CVE-2021-45232

Read More

Anthropic MCP Server Flaws: Path Traversal & Symlink Attacks Allow RCE

Anthropic MCP Server Flaws: Path Traversal & Symlink Attacks Allow RCE

Image: Cymulate
Cymulate Research Labs has revealed Anthropic’s Filesystem MCP Server vulnerabilities. Two newly disclosed flaws—CVE-2025-53110 and CVE-2025-53109—exposes systems to unauthorized acces …
Read more

Published Date:
Jul 04, 2025 (3 hours, 35 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-53110

CVE-2025-53109

CVE-2025-46647

Read More

Critical HIKVISION applyCT Flaw (CVE-2025-34067, CVSS 10.0): Unauthenticated RCE Via Fastjson

Critical HIKVISION applyCT Flaw (CVE-2025-34067, CVSS 10.0): Unauthenticated RCE Via Fastjson

Image: PeiQi0
A newly disclosed vulnerability in HIKVISION’s widely deployed security management platform, applyCT (previously known as HikCentral), has put countless surveillance and monitoring infra …
Read more

Published Date:
Jul 04, 2025 (3 hours, 21 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-34067

CVE-2021-36260

Read More