Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

April 28, 2025

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

Image: Chocapikk_
Security researcher Chocapikk has published a Metasploit module for a critical zero-day vulnerability impacting Craft CMS, tracked as CVE-2025-32432 (CVSS 10). This remote code execu …

Published Date:
Apr 28, 2025 (2 hours, 14 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-32432

CVE-2024-58136

Source: Read More

Previous Article400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild

Next Article CISA Warns of Critical Vulnerabilities in Planet Technology Products

Highlights

CVE-2025-3984 – Apereo CAS Groovy Code Handler Code Injection Vulnerability

April 27, 2025

CVE ID : CVE-2025-3984

Published : April 27, 2025, 8:15 p.m. | 2 hours, 49 minutes ago

Description : A vulnerability was found in Apereo CAS 5.2.6 and classified as critical. Affected by this issue is the function saveService of the file cas-5.2.6webapp-mgmtcas-management-webapp-supportsrcmainjavaorgapereocasmgmtserviceswebRegisteredServiceSimpleFormController.java of the component Groovy Code Handler. The manipulation leads to code injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 5.0 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

5 preinstalled apps you should delete from your Samsung phone immediately

Ubuntu Linux lagging? Try my 10 go-to tricks to speed it up

How I survived a week with this $130 smartwatch instead of my Garmin and Galaxy Ultra

YouTube is using AI to verify your age now – and if it’s wrong, that’s on you to fix

Time-Controlled Data Processing with Laravel LazyCollection Methods

Time-Controlled Data Processing with Laravel LazyCollection Methods

Create Apple Wallet Passes in Laravel

The Laravel Idea Plugin is Now FREE for PhpStorm Users

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

Opera throws Microsoft to Brazil’s watchdogs for promoting Edge as your default browser — “Microsoft thwarts‬‭ browser‬‭ competition‬‭‬‭ at‬‭ every‬‭ turn”

Activision once again draws the ire of players for new Diablo Immortal marketing that appears to have been made with generative AI

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

CVE-2025-43234 – Apple WatchOS/IOS/iPadOS/tvOS/macOS VisionOS Texture Corruption Vulnerability

CVE-2025-43237 – Apple macOS Sequoia Write Access Vulnerability

Critical 9.8 CVSS Flaw: Unpatched PayU CommercePro Plugin Allows Admin Account Takeover!

CVE-2025-49724 – Windows Connected Devices Platform Service Use-After-Free Remote Code Execution Vulnerability

CVE-2025-47816 – GNU PSPP XML Processing Out-of-Bounds Read Vulnerability

Best Chest Doctor Near Me

CVE-2025-3984 – Apereo CAS Groovy Code Handler Code Injection Vulnerability

Amazon’s Starlink challenger set for launch – here’s when you’ll be able to use it

Microsoft Edge’s latest stable channel update adds MORE AI — All Copilot all the time

OpenAI scientists wanted “a doomsday bunker” before AGI surpasses human intelligence and threatens humanity

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

Craft CMS Zero-Day CVE-2025-32432 Exploited with Metasploit Module Now Public

Related Posts