CVE-2025-22854 – PingFederate Google Adapter HTTP Response Handling Buffer Overflow

June 15, 2025

CVE ID : CVE-2025-22854

Published : June 15, 2025, 3:15 p.m. | 10 hours, 7 minutes ago

Description : Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2024-25573 – PingFederate Stored XSS Vulnerability

Next Article CVE-2025-6090 – H3C GR-5400AX Critical Buffer Overflow in UpdateWanparamsMulti/UpdateIpv6params

Highlights

CVE-2025-5956 – WP Human Resource Management Plugin Arbitrary User Deletion Vulnerability

July 3, 2025

CVE ID : CVE-2025-5956

Published : July 4, 2025, 3:15 a.m. | 22 minutes ago

Description : The WP Human Resource Management plugin for WordPress is vulnerable to Arbitrary User Deletion due to a missing authorization within the ajax_delete_employee() function in versions 2.0.0 through 2.2.17. The plugin’s deletion handler reads the client-supplied $_POST[‘delete’] array and passes each ID directly to wp_delete_user() without verifying that the caller has the delete_users capability or limiting which user IDs may be removed. This makes it possible for authenticated attackers, with Employee-level access and above, to delete arbitrary accounts, including administrators.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

CVE-2025-22854 – PingFederate Google Adapter HTTP Response Handling Buffer Overflow

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

Graphite spyware used in Apple iOS zero-click attacks on journalists

CVE-2025-49865 – Helmut Wandl Advanced Settings CSRF Vulnerability

CISA Warns of Consilium Fire Panel Vulnerabilities Allowing Remote Takeover

Build an AI-powered document processing platform with open source NER model and LLM on Amazon SageMaker

CVE-2025-5956 – WP Human Resource Management Plugin Arbitrary User Deletion Vulnerability

Hackers Attacking Network Edge Devices to Compromise SMB Organizations

Development Release: deepin 25 Beta

CVE-2025-5014 – The Home Villas | Real Estate WordPress Theme File Deletion Vulnerability (Arbitrary File Deletion)

CVE-2025-22854 – PingFederate Google Adapter HTTP Response Handling Buffer Overflow

Related Posts