ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2025-07-17
•8 min read
RCE Risk in WooCommerce Refund and Exchange with RMA: Unauthenticated File Upload (CVE-2025-6222)
A critical unauthenticated file upload vulnerability (CVE-2025-6222) in WooCommerce Refund and Exchange with RMA plugin enables remote code execution on WordPress sites. This post delivers a technical breakdown, affected versions, and patch details.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Multer DoS Vulnerability (CVE-2025-7338): How a Single Malformed Upload Can Crash Your Node.js App
A critical Denial of Service flaw in Multer (CVE-2025-7338) lets attackers crash Node.js servers with a single malformed multipart upload. Here’s a technical breakdown, affected versions, and how to patch.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Cracking the Shell: CVE-2025-7433 Local Privilege Escalation in Sophos Intercept X for Windows
A deep technical analysis of CVE-2025-7433, a high-severity local privilege escalation flaw in Sophos Intercept X for Windows with Central Device Encryption. Discover how insecure deserialization (CWE-502) enables arbitrary code execution, which versions are at risk, and exactly how to patch.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Attachment Manager ≤2.1.2: CVE-2025-7643 and the Perils of Unauthenticated File Deletion in WordPress
A critical flaw in the Attachment Manager WordPress plugin (≤2.1.2) enables unauthenticated attackers to delete arbitrary files, risking RCE and total site compromise. We dissect the vulnerability, affected versions, and the plugin's troubled security history.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
F5 BIG-IP CVE-2023-46747: Anatomy of a Critical TMUI Authentication Bypass and Remote Code Execution
CVE-2023-46747 exposes F5 BIG-IP to unauthenticated remote code execution via a critical TMUI authentication bypass. This post delivers a technical breakdown, PoC insights, patching instructions, detection methods, and a candid look at F5's security history.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•15 min read
Fortinet FortiWeb CVE-2025-25257: Pre-Auth SQL Injection to RCE – Anatomy of a Critical WAF Compromise
CVE-2025-25257 exposes a critical pre-auth SQL injection flaw in Fortinet FortiWeb (7.6.0–7.6.3, 7.4.0–7.4.7, 7.2.0–7.2.10, <7.0.11), enabling unauthenticated attackers to achieve remote code execution via crafted HTTP requests. This post delivers a technical breakdown, PoC, detection guidance, and patch details for security teams.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab Group 2FA Bypass (CVE-2025-0605): Anatomy of a Subtle Access Control Flaw
A deep technical analysis of CVE-2025-0605, a GitLab vulnerability allowing group-level two-factor authentication (2FA) bypass via Git operations. We break down the root cause, affected versions, exploitation vectors, and GitLab's patch response.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab Forking Restriction Bypass (CVE-2025-3396): Anatomy of an Authorization Flaw
A deep technical analysis of CVE-2025-3396, where GitLab project owners could bypass group-level forking restrictions via API manipulation. We detail the root cause, affected versions, patch details, and detection strategies for defenders.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab EE CVE-2025-4972: How a Low-Severity Auth Bypass Could Undermine Group Security
A deep technical analysis of CVE-2025-4972, a low-severity but impactful authorization flaw in GitLab EE that allowed users with invitation privileges to bypass group-level restrictions. We detail the vulnerability's mechanism, affected versions, patch details, and detection strategies.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
GitLab EE Maintainer Authorization Bypass (CVE-2025-6168): Technical Analysis and Detection Guidance
A technical breakdown of CVE-2025-6168, an authorization bypass in GitLab EE allowing maintainers to circumvent group-level user invitation restrictions via crafted API requests. Includes affected versions, patch details, and detection strategies.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
NVIDIAScape: Breaking Container Isolation with CVE-2025-23266 in NVIDIA Container Toolkit
CVE-2025-23266 (NVIDIAScape) exposes a critical container escape flaw in NVIDIA Container Toolkit, allowing attackers to gain root on the host via OCI hook misconfiguration. We detail the technical root cause, PoC, detection, and patching strategies for this high-impact vulnerability affecting AI/ML and cloud GPU environments.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•7 min read
Root Access Redux: Analyzing CVE-2025-52983 in Juniper Junos OS
Explore the critical UI discrepancy vulnerability CVE-2025-52983 in Juniper Junos OS, enabling unauthorized root access even after SSH public key removal.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•8 min read
Juniper SRX300 Series at Risk: Byte-Ordering Bug CVE-2025-52980 Opens Door to BGP DoS Attacks
A critical byte-ordering vulnerability, CVE-2025-52980, in Juniper's SRX300 Series allows attackers to crash routing daemons via crafted BGP UPDATE messages.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•6 min read
Juniper Networks Security Director Exposed: Critical Authorization Flaw CVE-2025-52950 Unveiled
A critical Missing Authorization vulnerability (CVE-2025-52950) in Juniper Networks Security Director allows unauthenticated attackers to access or tamper with sensitive resources, posing severe risks to network security.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•8 min read
Juniper Junos OS Hit by Critical BGP Use-After-Free Vulnerability (CVE-2025-52946)
A critical Use After Free vulnerability in Juniper's Junos OS and Junos OS Evolved allows attackers to crash routing protocol daemons via malformed BGP updates, causing sustained denial-of-service conditions.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•7 min read
Critical RCE in GB Forms DB Plugin (CVE-2025-5392) Threatens WordPress Sites
A critical remote code execution vulnerability (CVE-2025-5392) in the GB Forms DB WordPress plugin allows attackers to execute arbitrary code, posing severe risks to site security.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•10 min read
Wing FTP Server's NULL Byte Nightmare: Unauthenticated RCE via CVE-2025-47812
An in-depth technical exploration of CVE-2025-47812, a critical NULL byte handling flaw in Wing FTP Server enabling unauthenticated remote code execution.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•6 min read
Zoom's Linux Client at Risk: Unpacking CVE-2025-46788's Certificate Validation Flaw
A critical certificate validation vulnerability in Zoom Workplace for Linux (CVE-2025-46788) could expose sensitive information through man-in-the-middle attacks. Immediate patching is essential.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•8 min read
Git GUI's Hidden Danger: Unpacking CVE-2025-46334's Arbitrary Code Execution Risk
A critical vulnerability in Git GUI for Windows (CVE-2025-46334) enables attackers to execute arbitrary code through malicious repositories. Immediate patching is essential.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•7 min read
libxslt Under Siege: Unpacking the CVE-2025-7425 Use-After-Free Vulnerability
Explore the technical intricacies of CVE-2025-7425, a high-severity use-after-free vulnerability in libxslt, and learn how to mitigate its potential impact.
ZeroPath Security Research
