The Exploit Podcast: CVEs and Security News

Week ending 6th March 2025. Get ready for a deep dive into a newly released batch of critical security advisories. We're breaking down dozens of high-severity vulnerabilities affecting everything from WordPress themes and plugins to enterprise solutions like Vasion Print and UniFi Protect. Learn about the attack vectors, including remote code execution, authentication bypasses, and the ever-presen...

Week ending 27th Feb, 2025. Key vulnerabilities to be discussed include: JWT Validation Failure in JupyterHub Arbitrary File Upload and SQL Injection in Mattermost , where versions of Mattermost are failing to properly validate board blocks when importing boards and failing to use prepared statements in SQL queries Path Traversal File Deletion in Mautic , where improper handling of path components...

Week ending 20th Feb. The Exploit Podcast  dives deep into the week's most critical vulnerabilities affecting software, hardware, and web applications. Host and Principal Security Architect dissect real-world security challenges, from a sensitive information leak in a popular WordPress plugin (Oliver POS) to SAML signature bypasses in the CIE authentication library, command injection in Widget...

Week ending 13th Feb 2025. Get ready for another intense week in cybersecurity! This week, we're diving deep into a fresh batch of  critical  vulnerabilities hitting everything from WordPress plugins to enterprise software. We'll uncover flaws that could let attackers remotely hijack your systems, steal your data, or even take over entire networks. From privilege escalation in popular Word...

Week 5 ending 6th Feb, 2025. In this episode, we dive deep into the latest security advisories, uncovering a surge of critical vulnerabilities affecting a wide range of software. From command injection flaws in EasyVirt DCScope and privilege escalation vulnerabilities due to weak encryption, to remote code execution exploits in Advantive VeraCore and ClassCMS, we break down the threats and their p...

A deep dive into the most critical security vulnerabilities reported in late January 2025. We cover everything from remote code execution flaws to SQL injections, and discuss the potential impact of these threats. These podcasts are auto-generated from the CVE feeds. Please use the information at your own risk.

Week ending 23rd Jan. This week's security landscape is riddled with critical flaws across various platforms. We're seeing a surge in vulnerabilities stemming from inadequate input validation, leading to issues like privilege escalation and account takeovers in WordPress plugins. SQL Injection remains a prevalent threat, allowing attackers to manipulate databases, while arbitrary file uplo...

Week ending 16th Jan. This podcast episode delves into recent critical software vulnerabilities, breaking down their technical details and real-world implications. Topics include server-side template injection (SSTI), OAuth nonce predictability, OS command injection, and file upload vulnerabilities. The discussion explores how attackers exploit these weaknesses, the potential impact on systems and...

Week ending 9th Jan. This episode dives into some of the most critical security vulnerabilities recently discovered. From web applications to network devices and authentication systems, we break down how these exploits work, their potential impact, and what can be done to mitigate them. Whether you're a security professional or just curious about the latest threats, this discussion will keep y...