CVE-2025-44957 – Ruckus SmartZone Authentication Bypass Vulnerability

August 4, 2025

CVE ID : CVE-2025-44957

Published : Aug. 4, 2025, 5:15 p.m. | 8 hours, 5 minutes ago

Description : Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-44960 – RUCKUS SmartZone OS Command Injection Vulnerability

Next Article CVE-2025-44954 – RUCKUS SmartZone SSH Private Key Hardcoded Vulnerability

Highlights

CVE-2025-25034 – SugarCRM Object Injection Vulnerability

June 20, 2025

CVE ID : CVE-2025-25034

Published : June 20, 2025, 7:15 p.m. | 3 hours, 14 minutes ago

Description : A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the SugarRestSerialize.php script. The vulnerable code fails to sanitize the rest_data parameter before passing it to the unserialize() function. This allows an unauthenticated attacker to submit crafted serialized data containing malicious object declarations, resulting in arbitrary code execution within the application context. Although SugarCRM released a prior fix in advisory sugarcrm-sa-2016-001, the patch was incomplete and failed to address some vectors.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

UX Job Interview Helpers

.NET Aspire’s CLI reaches general availability in 9.4 release

15 Essential Skills to Look for When Hiring Node.js Developers for Enterprise Projects (2025-2026)

African training program creates developers with cloud-native skills

Why I’ll keep the Samsung Z Fold 7 over the Pixel 10 Pro Fold – especially if these rumors are true

You may soon get Starlink internet for a much lower ‘Community’ price – here’s how

uBlock Origin Lite has finally arrived for Safari – with one important caveat

Perplexity says Cloudflare’s accusations of ‘stealth’ AI scraping are based on embarrassing errors

Send Notifications in Laravel with Firebase Cloud Messaging and Notifire

Send Notifications in Laravel with Firebase Cloud Messaging and Notifire

Simplified Batch Job Creation with Laravel’s Enhanced Artisan Command

Send Notifications in Laravel with Firebase Cloud Messaging and Notifire

This comfy mesh office chair I’ve been testing costs less than $400 — but there’s a worthy alternative that’s far more affordable

This comfy mesh office chair I’ve been testing costs less than $400 — but there’s a worthy alternative that’s far more affordable

How to get started with Markdown in the Notepad app for Windows 11

Microsoft Account Lockout: LibreOffice Developer’s Week-Long Nightmare Raises Concerns

CVE-2025-44957 – Ruckus SmartZone Authentication Bypass Vulnerability

SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported

Think Before You Download: UAE Cybersecurity Council Issues Warning on Unverified Apps

This ultraportable LG laptop gives my 15-inch MacBook Air some serious competition

CVE-2025-6347 – Code-Projects Responsive Blog Cross-Site Scripting Vulnerability

Kapitano (Linux Antivirus Scanner) Developer Abandons Ship

CVE-2025-43566 – ColdFusion versions 2025.1, 2023.13, 2021.19 and e

CVE-2025-25034 – SugarCRM Object Injection Vulnerability

Simplify HasManyThrough Relationships with Laravel’s CanBeOneOfMany Support

Ubuntu 25.10 Raises RISC-V Profile Requirements

Hongkong Post Cyberattack Exposes User Data in EC-Ship Breach

CVE-2025-44957 – Ruckus SmartZone Authentication Bypass Vulnerability

Related Posts