CVE-2024-47062

CVE-2024-47062: Navidrome's SQL Injection Vulnerability

A critical SQL injection vulnerability, designated as CVE-2024-47062, was recently discovered in Navidrome. This flaw allows authenticated users to execute arbitrary SQL queries against the Navidrome database.

CVE-2024-32113

CVE-2024-32113: Remote Code Execution in Apache OFBiz

The vulnerability, tracked as CVE-2024-32113 in Apache OFBiz, allows unauthenticated attackers to execute arbitrary system commands through a specially crafted request.

CVE-2024-9264 banner

CVE-2024-9264: Command Injection and Local File Inclusion in Grafana

CVE-2024-9264 is a critical security vulnerability that affects Grafana. This vulnerability, stemming from the newly introduced SQL Expressions feature, allows for remote code execution (RCE) and local file inclusion (LFI) attacks.

CVE-2024-9264: Command Injection and LFI in Grafana

CVE-2024-48914

CVE-2024-48914: Arbitrary File Read Vulnerability in Vendure

CVE-2024-48914 is a critical security vulnerability that affects older versions of Vendure, an open-source headless commerce platform. This vulnerability allows attackers to exploit a flaw in the asset server plugin to read arbitrary files on the server.

CVE-2022-44268 banner

CVE-2022-44268: Arbitrary File Disclosure in ImageMagick

CVE-2022-44268 is a critical vulnerability residing within ImageMagick, a popular open-source image processing library. This vulnerability exposes systems running affected versions of ImageMagick to information disclosure attacks.

CVE-2021-43798 banner

CVE-2021-43798: Path Traversal in Grafana

In this blog, we will dissect the technical details, impact potential and a proof of concept of CVE-2021-43798 (Grafana path traversal vulnerability) using an exploit script.

CVE-2021-3129 banner

CVE-2021-3129: Remote Code Execution in Laravel

In the ever-evolving landscape of web security, the 2021 discovery of CVE-2021-3129, a critical remote code execution (RCE) vulnerability in Laravel's Ignition debugging tool, sent shivers down the spines of developers worldwide.

Ethical Hacking

Ethical Hacking