ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2025-07-18
•11 min read
Critical PHP Object Injection in WordPress Google Sheets Integration Plugin (CVE-2025-7697): Technical Breakdown and Real-World Impact
CVE-2025-7697 is a critical PHP Object Injection vulnerability in the 'Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms' WordPress plugin (≤1.1.1). Unauthenticated attackers can exploit its unsafe deserialization, which can lead to arbitrary file deletion or remote code execution. This post covers the technical details, affected versions, patch and detection guidance, and the vendor's security history.
ZeroPath Security Research
CVE Analysis
•2025-07-18
•9 min read
Grafana CVE-2025-6023: Chained Open Redirect to XSS – Technical Breakdown and Patch Guidance
A critical open redirect vulnerability (CVE-2025-6023) in Grafana OSS v11.5.0+ can be chained into XSS attacks. Written for security professionals, this post covers how the flaw works, which releases patch it, how to detect exploitation, and Grafana's security track record.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•30 min read
Log4Shell Unleashed: Inside CVE-2021-44228 and the Log4j RCE Crisis
Log4Shell (CVE-2021-44228) is a critical RCE in Apache Log4j 2.x that exposed global infrastructure to trivial exploitation. This post breaks down the exploitation mechanics, a proof of concept, patching, detection, and vendor response for defenders and incident responders.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•14 min read
Apache HTTP Server AJP Smuggling (CVE-2022-26377): Anatomy of a High-Impact Proxy Flaw
A technical analysis of CVE-2022-26377, an HTTP request smuggling flaw in Apache HTTP Server's mod_proxy_ajp module. We cover how the bug works, which versions it affects, how to detect it, and how to patch it.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•9 min read
Node.js HTTP Request Smuggling (CVE-2022-35256): Anatomy of a Parsing Flaw in llhttp
A technical analysis of CVE-2022-35256, a request smuggling vulnerability in the llhttp parser that Node.js uses. We cover the parsing flaw, the affected versions, the real-world impact, and the patch that makes llhttp enforce CRLF header termination.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•18 min read
MOVEit Transfer CVE-2023-34362: Anatomy of a Critical SQL Injection and Real-World Exploitation
A critical SQL injection flaw in Progress MOVEit Transfer (CVE-2023-34362) let unauthenticated attackers breach sensitive databases and deploy web shells, feeding a global ransomware campaign. This post walks through the exploitation, the proof-of-concept, patch guidance, and detection strategies for defenders.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
ReDoS in Chai’s get-func-name: CVE-2023-43646 Technical Analysis & PoC
A high-severity ReDoS vulnerability (CVE-2023-43646) in Chai's get-func-name module exposes Node.js and browser apps to denial of service through an inefficient regex. This post covers the breakdown, a PoC, patch details, and detection strategies for security teams.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Sophos Intercept X Updater LPE: Dissecting CVE-2024-13972’s Registry Permission Flaw
CVE-2024-13972 is a critical local privilege escalation in Sophos Intercept X for Windows, caused by insecure registry permissions during upgrades. This analysis covers how the flaw works, which versions are affected, how to patch, and how defenders can detect exploitation attempts.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Rails ReDoS: CVE-2024-26142 and the Accept Header Parsing Flaw
A critical flaw in Rails 7.1.x's Accept header parsing exposes applications to ReDoS attacks. We cover the root cause, the affected versions, and the official patch that fixes it.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•13 min read
When Containers Break the Rules: CVE-2025-23267 in NVIDIA Container Toolkit and the Perils of Link Following
CVE-2025-23267, a high-severity flaw in NVIDIA's Container Toolkit, lets attackers break container boundaries and tamper with host files through a link-following bug in the update-ldcache hook. This post covers the root cause, the affected versions, and how to patch or mitigate it.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
Cache Poisoning Reloaded: Deep Dive into CVE-2025-4366 and Pingora's Request Smuggling Flaw
CVE-2025-4366 is a high-severity request smuggling vulnerability in Cloudflare's Pingora proxy framework. It exposes users of Pingora's HTTP/1.1 caching to unauthorized request execution and cache poisoning. This analysis covers how the bug works, which versions are affected, what the patch changes, and how defenders can detect it.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
RCE Risk in WooCommerce Refund and Exchange with RMA: Unauthenticated File Upload (CVE-2025-6222)
A critical unauthenticated file upload vulnerability (CVE-2025-6222) in the WooCommerce Refund and Exchange with RMA plugin allows remote code execution on WordPress sites. This post explains how the flaw works, which versions are affected, and what the patch contains.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Multer DoS Vulnerability (CVE-2025-7338): How a Single Malformed Upload Can Crash Your Node.js App
A critical Denial of Service flaw in Multer (CVE-2025-7338) lets attackers crash Node.js servers with a single malformed multipart upload. This post covers how the flaw works, which versions are affected, and how to patch.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Cracking the Shell: CVE-2025-7433 Local Privilege Escalation in Sophos Intercept X for Windows
A technical analysis of CVE-2025-7433, a high-severity local privilege escalation flaw in Sophos Intercept X for Windows with Central Device Encryption. It covers how insecure deserialization (CWE-502) leads to arbitrary code execution, which versions are at risk, and how to patch.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
Attachment Manager ≤2.1.2: CVE-2025-7643 and the Perils of Unauthenticated File Deletion in WordPress
A critical flaw in the Attachment Manager WordPress plugin (≤2.1.2) lets unauthenticated attackers delete arbitrary files, which can lead to RCE and full site compromise. We cover how the vulnerability works, which versions are affected, and the plugin's history of security problems.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•12 min read
F5 BIG-IP CVE-2023-46747: Anatomy of a Critical TMUI Authentication Bypass and Remote Code Execution
CVE-2023-46747 lets unauthenticated attackers run code on F5 BIG-IP through a TMUI authentication bypass scored 9.8. This post covers the mechanism, a public PoC, patching steps, detection queries, and F5's track record with TMUI flaws.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•15 min read
Fortinet FortiWeb CVE-2025-25257: Pre-Auth SQL Injection to RCE – Anatomy of a Critical WAF Compromise
CVE-2025-25257 is a critical pre-auth SQL injection flaw in Fortinet FortiWeb (7.6.0–7.6.3, 7.4.0–7.4.7, 7.2.0–7.2.10, <7.0.11) that lets unauthenticated attackers reach remote code execution through crafted HTTP requests. This post covers the technical breakdown, a PoC, detection guidance, and patch details for security teams.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab Group 2FA Bypass (CVE-2025-0605): Anatomy of a Subtle Access Control Flaw
CVE-2025-0605 let users with valid credentials clone, push, and run other Git operations on repositories in GitLab groups that require two-factor authentication (2FA), without ever passing a second factor. This technical analysis covers the root cause, affected versions, exploitation vectors, and GitLab's patch response.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab Forking Restriction Bypass (CVE-2025-3396): Anatomy of an Authorization Flaw
A technical analysis of CVE-2025-3396, an authorization flaw that let GitLab project owners bypass group-level forking restrictions by manipulating API requests. This post covers the root cause, affected versions, the patch, and how defenders can detect it.
ZeroPath Security Research
CVE Analysis
•2025-07-17
•8 min read
GitLab EE CVE-2025-4972: How a Low-Severity Auth Bypass Could Undermine Group Security
CVE-2025-4972 is a low-severity authorization flaw in GitLab EE that let users with invitation privileges bypass group-level restrictions. Its CVSS score is low, but its impact is real. This post covers how the flaw works, which versions are affected, what the patch changes, and how to detect vulnerable installations.
ZeroPath Security Research
