ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2025-07-17
•8 min read
GitLab Group 2FA Bypass (CVE-2025-0605): Anatomy of a Subtle Access Control Flaw
CVE-2025-0605 let users with valid credentials clone, push, and run other Git operations on repositories in GitLab groups that require two-factor authentication (2FA), without ever passing a second factor. This technical analysis covers the root cause, affected versions, exploitation vectors, and GitLab's patch response.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab Forking Restriction Bypass (CVE-2025-3396): Anatomy of an Authorization Flaw
A technical analysis of CVE-2025-3396, an authorization flaw that let GitLab project owners bypass group-level forking restrictions by manipulating API requests. This post covers the root cause, affected versions, the patch, and how defenders can detect it.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab EE CVE-2025-4972: How a Low-Severity Auth Bypass Could Undermine Group Security
CVE-2025-4972 is a low-severity authorization flaw in GitLab EE that let users with invitation privileges bypass group-level restrictions. Its CVSS score is low, but its impact is real. This post covers how the flaw works, which versions are affected, what the patch changes, and how to detect vulnerable installations.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
GitLab EE Maintainer Authorization Bypass (CVE-2025-6168): Technical Analysis and Detection Guidance
A technical breakdown of CVE-2025-6168, an authorization bypass in GitLab EE that lets maintainers get around group-level user invitation restrictions with crafted API requests. Covers affected versions, the patch, and detection strategies.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
NVIDIAScape: Breaking Container Isolation with CVE-2025-23266 in NVIDIA Container Toolkit
CVE-2025-23266 (NVIDIAScape) is a container escape flaw in NVIDIA Container Toolkit. A malicious container can gain root on the host through an OCI hook that inherits environment variables. This post covers the root cause, a proof of concept, detection, and patching for GPU environments.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•7 min read
Root Access Redux: Analyzing CVE-2025-52983 in Juniper Junos OS
Explore the critical UI discrepancy vulnerability CVE-2025-52983 in Juniper Junos OS, enabling unauthorized root access even after SSH public key removal.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•8 min read
Juniper SRX300 Series at Risk: Byte-Ordering Bug CVE-2025-52980 Opens Door to BGP DoS Attacks
A critical byte-ordering vulnerability, CVE-2025-52980, in Juniper's SRX300 Series allows attackers to crash routing daemons via crafted BGP UPDATE messages.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•6 min read
Juniper Networks Security Director Exposed: Critical Authorization Flaw CVE-2025-52950 Unveiled
A critical Missing Authorization vulnerability (CVE-2025-52950) in Juniper Networks Security Director allows unauthenticated attackers to access or tamper with sensitive resources, posing severe risks to network security.
ZeroPath Security Research
CVE Analysis
•2025-07-11
•8 min read
Juniper Junos OS Hit by Critical BGP Use-After-Free Vulnerability (CVE-2025-52946)
A critical Use After Free vulnerability in Juniper's Junos OS and Junos OS Evolved allows attackers to crash routing protocol daemons via malformed BGP updates, causing sustained denial-of-service conditions.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•7 min read
Critical RCE in GB Forms DB Plugin (CVE-2025-5392) Threatens WordPress Sites
A critical remote code execution vulnerability (CVE-2025-5392) in the GB Forms DB WordPress plugin allows attackers to execute arbitrary code, posing severe risks to site security.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•10 min read
Wing FTP Server's NULL Byte Nightmare: Unauthenticated RCE via CVE-2025-47812
An in-depth technical exploration of CVE-2025-47812, a critical NULL byte handling flaw in Wing FTP Server enabling unauthenticated remote code execution.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•6 min read
Zoom's Linux Client at Risk: Unpacking CVE-2025-46788's Certificate Validation Flaw
A critical certificate validation vulnerability in Zoom Workplace for Linux (CVE-2025-46788) could expose sensitive information through man-in-the-middle attacks. Immediate patching is essential.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•8 min read
Git GUI's Hidden Danger: Unpacking CVE-2025-46334's Arbitrary Code Execution Risk
A critical vulnerability in Git GUI for Windows (CVE-2025-46334) enables attackers to execute arbitrary code through malicious repositories. Immediate patching is essential.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•7 min read
libxslt Under Siege: Unpacking the CVE-2025-7425 Use-After-Free Vulnerability
Explore the technical intricacies of CVE-2025-7425, a high-severity use-after-free vulnerability in libxslt, and learn how to mitigate its potential impact.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•5 min read
Libxslt Type Confusion Vulnerability (CVE-2025-7424): Risks of XML Transformation Gone Wrong
An analysis of CVE-2025-7424, a type confusion vulnerability in libxslt, highlighting potential risks and technical insights.
ZeroPath Security Research
CVE Analysis
•2025-07-10
•7 min read
GitLab XSS Vulnerability CVE-2025-6948: Malicious Content Injection Risk
A critical XSS vulnerability (CVE-2025-6948) in GitLab CE/EE allows attackers to execute unauthorized actions by injecting malicious content. Immediate patching is essential.
ZeroPath Security Research
CVE Analysis
•2025-07-09
•7 min read
CVE-2025-49694: Microsoft Brokering File System Null Pointer Dereference Enables Privilege Escalation
An in-depth analysis of CVE-2025-49694, a null pointer dereference flaw in Microsoft's Brokering File System, allowing local attackers to escalate privileges.
ZeroPath Security Research
CVE Analysis
•2025-07-09
•8 min read
Microsoft Brokering File System Double Free Vulnerability: A Deep Look into CVE-2025-49693
An in-depth technical analysis of CVE-2025-49693, a critical double free vulnerability in Microsoft's Brokering File System enabling local privilege escalation.
ZeroPath Security Research
CVE Analysis
•2025-07-08
•7 min read
Windows Media's Hidden Danger: Analyzing CVE-2025-49682 Use-After-Free Privilege Escalation
Explore the technical intricacies of CVE-2025-49682, a critical use-after-free vulnerability in Windows Media enabling local privilege escalation, and learn essential detection and mitigation strategies.
ZeroPath Security Research
CVE Analysis
•2025-07-08
•8 min read
Windows Shell Numeric Truncation Flaw (CVE-2025-49679): A Gateway to Privilege Escalation
An in-depth analysis of CVE-2025-49679, a numeric truncation vulnerability in Windows Shell, enabling local attackers to escalate privileges.
ZeroPath Security Research
