CVE-2025-21085 – PingFederate PostgreSQL OAuth2 Memory Exhaustion

June 15, 2025

CVE ID : CVE-2025-21085

Published : June 15, 2025, 3:15 p.m. | 10 hours, 7 minutes ago

Description : PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6090 – H3C GR-5400AX Critical Buffer Overflow in UpdateWanparamsMulti/UpdateIpv6params

Next Article CVE-2025-6089 – Astun Technology iShare Maps Open Redirect Vulnerability

Highlights

CVE-2025-32421 – Next.js Race Condition Page Prop Exposure

May 15, 2025

CVE ID : CVE-2025-32421

Published : May 14, 2025, 11:15 p.m. | 3 hours, 51 minutes ago

Description : Next.js is a React framework for building full-stack web applications. Versions prior to 14.2.24 and 15.1.6 have a race-condition vulnerability. This issue only affects the Pages Router under certain misconfigurations, causing normal endpoints to serve `pageProps` data instead of standard HTML. This issue was patched in versions 15.1.6 and 14.2.24 by stripping the `x-now-route-matches` header from incoming requests. Applications hosted on Vercel’s platform are not affected by this issue, as the platform does not cache responses based solely on `200 OK` status without explicit `cache-control` headers. Those who self-host Next.js deployments and are unable to upgrade immediately can mitigate this vulnerability by stripping the `x-now-route-matches` header from all incoming requests at the content development network and setting `cache-control: no-store` for all responses under risk. The maintainers of Next.js strongly recommend only caching responses with explicit cache-control headers.

Severity: 3.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 15 Enterprise Use Cases That Justify Hiring Node.js Developers in 2025

The Core Model: Start FROM The Answer, Not WITH The Solution

AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode Research Reveals

Understanding the code modernization conundrum

Not just YouTube: Google is using AI to guess your age based on your activity – everywhere

Malicious extensions can use ChatGPT to steal your personal data – here’s how

What Zuckerberg’s ‘personal superintelligence’ sales pitch leaves out

This handy NordVPN tool flags scam calls on Android – even before you answer

Route Optimization through Laravel’s Shallow Resource Architecture

Route Optimization through Laravel’s Shallow Resource Architecture

This Week in Laravel: Laracon News, Free Laravel Idea, and Claude Code Course

Everything We Know About Pest 4

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

Windows 11’s MSN Widgets board now opens in default browser, such as Chrome (EU only)

Microsoft’s new “move to Windows 11” campaign implies buying OneDrive paid plan

CVE-2025-21085 – PingFederate PostgreSQL OAuth2 Memory Exhaustion

The hidden risks of browser extensions – and how to stay safe

Minnesota National Guard Deployed After Major Cyberattack on St. Paul City Systems

How PHP Type Juggling Works – Explained with Code Examples

CVE-2025-5629 – Tenda AC10 HTTP Handler PPTP Server Buffer Overflow Vulnerability

Watermark add watermarks to images

Windows 10 KB5060533 adds Bing feature to Calendar UI on taskbar

CVE-2025-32421 – Next.js Race Condition Page Prop Exposure

Not Rumor Anymore: Persona 4 Revival Announced At Xbox Games Showcase 2025

Why Your Business Needs a React Native Mobile App in 2025

CVE-2025-53568 – Tony Zeoli Radio Station CSRF Vulnerability

CVE-2025-21085 – PingFederate PostgreSQL OAuth2 Memory Exhaustion

Related Posts