CVE-2021-4034 banner

Demystifying CVE-2021-4034: Unpacking the Polkit pkexec RCE Vulnerability

In this blog, we explore the innards of CVE-2021-4034 at a technical level focusing on its operation, possible fallouts, proof of concept and takeaways.

CVE-2023-25157: SQL Injection Vulnerabilities in GeoServer


GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. On June 6, 2023, a security researcher disclosed two SQL injection vulnerabilities in GeoServer, tracked as CVE-2023-25157 and CVE-2023-25158.

CVE-2023-22809 sudoedit Privilege Escalation Vulnerability: Comprehensive Analysis


The sudoedit command is a tool that allows users to edit files with elevated privileges. It is a popular tool for system administrators and other users who need to make changes to system files. 

CVE-2023-32784: Master Password Disclosure in KeePass


In May 2023, a vulnerability was discovered in KeePass that could allow an attacker to extract the master password in cleartext from the memory of the process that was running. This vulnerability is known as CVE-2023-32784 and has a CVSS score of 9.8.

Ethical Hacking

Ethical Hacking - Mitigation Strategies