CVE-2025-22239 – Salt Master Arbitary Event Injection Vulnerability

June 13, 2025

CVE ID : CVE-2025-22239

Published : June 13, 2025, 7:15 a.m. | 2 hours, 49 minutes ago

Description : Arbitrary event injection on Salt Master. The master’s “_minion_event” method can be used by and authorized minion to send arbitrary events onto the master’s event bus.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-22240 – GitFS Path Traversal Vulnerability

Next Article CVE-2025-22238 – Minion File Cache Directory Traversal Vulnerability

Highlights

CVE-2024-7096 – WSO2 SOAP Admin Privilege Escalation Vulnerability

May 30, 2025

CVE ID : CVE-2024-7096

Published : May 30, 2025, 3:15 p.m. | 2 hours, 23 minutes ago

Description : A privilege escalation vulnerability exists in multiple [Vendor Name] products due to a business logic flaw in SOAP admin services. A malicious actor can create a new user with elevated permissions only when all of the following conditions are met:
* SOAP admin services are accessible to the attacker.
* The deployment includes an internally used attribute that is not part of the default WSO2 product configuration.
* At least one custom role exists with non-default permissions.
* The attacker has knowledge of the custom role and the internal attribute used in the deployment.

Exploiting this vulnerability allows malicious actors to assign higher privileges to self-registered users, bypassing intended access control mechanisms.

Severity: 4.2 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

How To Prevent WordPress SQL Injection Attacks

This week in AI dev tools: Apple’s Foundations Model framework, Mistral’s first reasoning model, and more (June 13, 2025)

Open Talent platforms emerging to match skilled workers to needs, study finds

Java never goes out of style: Celebrating 30 years of the language

6 registry tweaks every tech-savvy user must apply on Windows 11

Here’s why network infrastructure is vital to maximizing your company’s AI adoption

The AI video tool behind the most viral social trends right now

Got a new password manager? How to clean up the password mess you left in the cloud

Right Invoicing App for iPhone: InvoiceTemple

Right Invoicing App for iPhone: InvoiceTemple

Tunnel Run game in 170 lines of pure JS

Integrating Drupal with Salesforce SSO via SAML and Dynamic User Sync

6 registry tweaks every tech-savvy user must apply on Windows 11

6 registry tweaks every tech-savvy user must apply on Windows 11

Is Chrome Copying Edge? ‘Omnibox Tools’ Bring Edge-Style Address Bar Shortcuts

Windows 11 24H2’s new Start Menu auto-changes size based on screen resolution

CVE-2025-22239 – Salt Master Arbitary Event Injection Vulnerability

Tenable Agent for Windows Vulnerability Let Attackers Login as Admin to Delete The System Files

Meta Invests $14.3 Billion in Scale AI, Recruits Founder Alexandr Wang for Superintelligence Lab

CVE-2025-4770 – PHPGurukul Park Ticketing Management System SQL Injection Vulnerability

Microsoft Store adds Copilot, smarter search, and a personalized homepage

How to Get Traffic to Your Website Using Custom GPTs? [Leaked Step-by-Step Guide]

CVE-2025-3459 – Quantenna Wi-Fi Command Injection Vulnerability

CVE-2024-7096 – WSO2 SOAP Admin Privilege Escalation Vulnerability

FOSS Weekly #25.19: sudo-rs, Terminal Makeover, Kazam 2.0, Mission Center and More Linux Stuff

CVE-2025-47760 – Apache V-SFT Stack-Based Buffer Overflow Vulnerability

CVE-2025-3662 – FancyBox for WordPress Unauthenticated Stored XSS

CVE-2025-22239 – Salt Master Arbitary Event Injection Vulnerability

Related Posts