Cybersecurity

CVE-2025-0650 - OVN DNS Record Egress ACL Bypass

CVE-2025-20156 - Cisco Meeting Management Unauthenticated Privilege Escalation Vulnerability

CVE-2025-23006 - SMA1000 Appliance Deserialization Command Injection Vulnerability

CVE-2025-23227 - IBM Tivoli Application Dependency Discovery Manager Stored Cross-Site Scripting

CVE-2025-24033 - Fastify/multipart Temporary File Lease

CVE-2025-24034 - Microsoft Azure Entra ID and Intune Himmelblau Credential Leaking Vulnerability

CVE-2025-24353 - Directus Role Bypass

CVE-2025-24398 - Jenkins Bitbucket Server Integration Plugin Cross-Site Request Forgery (CSRF) Vulnerability

CVE-2025-24399 - Jenkins OpenId Connect Authentication Plugin Case Insensitive Authentication Bypass Vulnerability

Pwn2Own Automotive 2025 - Day Two Results