The Exploit Podcast: CVEs and Security News

By SecurityPod

Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.

Image by SecurityPod

Category: Tech News

Open in Apple Podcasts


Open RSS feed


Open Website


Rate for this podcast

Subscribers: 0
Reviews: 0
Episodes: 9

Description

Stay updated with the most critical vulnerabilities of the week. In each episode, we analyze major CVEs, what caused them, their impact and mitigation strategies - helping security professionals and enthusiasts stay ahead of threats.

Episode Date
Camera Hijack on Unifi Protect, Dylib Hijacking in Davinci Resolve, Non-deterministic Deserialization in IBC-go, Authentication Bypass in CyberArk, RCE in Uniguest Tripleplay and more
Mar 07, 2025
JWT Validation Failure In Jupyter Hub, Arbitrary File Upload and SQL Injection in Mattermost, Path Traversal File Deletion in Mautic, Desrialization Of Untrusted Data in MetaSlider and more
Feb 27, 2025
Integer Overflow in Mercedes-Benz, RCE via Deserialization in Apache Ignite, Improper Authentication in Orca HCM, Plaintext Password in Netgear C7800 and more
Feb 20, 2025
Remote code execution via Prompt Injection in PandasAI, Unverified password change vulnerability in Janto, Private Key Extraction in Elliptic (JS) and Regex Denial of Service in Koa and more
Feb 13, 2025
Django Unicorn Class Pollution, GeoTools XPath Manipulation, Eladmin CSV Injection, Zimbra SQL Injection, Woocomerce Taxi Booking Deserialization and more
Feb 06, 2025
Code Injection via UnTar in DJL, Header Bypass in ismp-grandpa, Arbitrary File Upload in Wordpress Plugin and more
Jan 30, 2025
Account Takeover in Wordpress Plugin, SQL Injection in APlus, SSRF in Apache Ranger UI and more
Jan 30, 2025
Search Injection in Mongoose, Insecure Serialization Rosa Open Source, XWiki Realtime Editor Privilege Escalation and more
Jan 30, 2025
OpenVPN Code Injection, go-git Command Injection, Perl OAuth Nonce Manipulation and more
Jan 30, 2025