CVE-2025-5175 – Erdogant PyPickle Save Function Improper Authorization Critical Vulnerability

May 26, 2025

CVE ID : CVE-2025-5175

Published : May 26, 2025, 8:15 a.m. | 56 minutes ago

Description : A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named 14b4cae704a0bb4eb6723e238f25382d847a1917. It is recommended to upgrade the affected component.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-5176 – Realce Tecnologia Queue Ticket Kiosk SQL Injection Vulnerability

Next Article CVE-2025-5174 – Erdogant PyPickle Deserialization Vulnerability

Highlights

CVE-2025-6793 – Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Vulnerability

July 7, 2025

CVE ID : CVE-2025-6793

Published : July 7, 2025, 3:15 p.m. | 2 hours, 59 minutes ago

Description : Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability. This vulnerability allows remote attackers to delete arbitrary files and disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the QLogicDownloadImpl class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files and disclose information in the context of SYSTEM. Was ZDI-CAN-24912.

Severity: 9.4 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

AI updates from the past week: New OpenAI models, NVIDIA AI-Q Blueprint, and Anthropic’s Google Workspace integration — April 18, 2025

April 18, 2025

Simple Diary is a simple and lightweight app

June 5, 2025

I tested Samsung’s QD-OLED 4K monitor for gaming and work – and it was equally practical

April 23, 2025

Report: 71% of tech leaders won’t hire devs without AI skills

Slack’s AI search now works across an organization’s entire knowledge base

In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

Too many open browser tabs? This is still my favorite solution – and has been for years

This new browser won’t monetize your every move – how to try it

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

The details of TC39’s last meeting

The details of TC39’s last meeting

Reclaim Space: Delete Docker Orphan Layers

Notes Android App Using SQLite

KeySmith – SSH key management

KeySmith – SSH key management

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

CVE-2025-5175 – Erdogant PyPickle Save Function Improper Authorization Critical Vulnerability

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

Enhance Validation Testing Precision with Laravel’s assertOnlyJsonValidationErrors

Berserk is a UCI compliant chess engine

CVE-2025-4511 – Vector4Wang Spring-Boot-Quick Remote Path Traversal Vulnerability

CVE-2025-48756 – “Apache SCSIR Group Number Bit Overflow Vulnerability”

CVE-2025-6793 – Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Vulnerability

AI updates from the past week: New OpenAI models, NVIDIA AI-Q Blueprint, and Anthropic’s Google Workspace integration — April 18, 2025

Simple Diary is a simple and lightweight app

I tested Samsung’s QD-OLED 4K monitor for gaming and work – and it was equally practical

CVE-2025-5175 – Erdogant PyPickle Save Function Improper Authorization Critical Vulnerability

Related Posts