CVE-2024-48914

CVE-2024-48914: Arbitrary File Read Vulnerability in Vendure

CVE-2024-48914 is a critical security vulnerability that affects older versions of Vendure, an open-source headless commerce platform. This vulnerability allows attackers to exploit a flaw in the asset server plugin to read arbitrary files on the server.

CVE-2021-43798 banner

CVE-2021-43798: Path Traversal in Grafana

In this blog, we will dissect the technical details, impact potential and a proof of concept of CVE-2021-43798 (Grafana path traversal vulnerability) using an exploit script.

CVE-2024-24809 banner

CVE-2024-24809: Traccar GPS Path Traversal and File Upload Vulnerability

CVE-2024-24809 is a critical vulnerability affecting Traccar, an open-source GPS tracking system. This vulnerability combines a path traversal attack with an unrestricted file upload, allowing attackers to execute arbitrary code on affected systems.

CVE-2024-37032 (banner)

A Deep Dive into CVE-2024-37032 (Ollama RCE Vulnerability)

This blog post offers a technical analysis of CVE-2024-37032, a recently discovered Remote Code Execution (RCE) vulnerability within Ollama, a popular AI infrastructure framework.

CVE-2024-4956 banner

CVE-2024-4956: Path Traversal Vulnerability in Sonatype Nexus Repository 3

CVE-2024-4956 is a critical path traversal vulnerability identified in Sonatype Nexus Repository 3. This vulnerability allows an unauthenticated attacker to exploit the application and potentially gain access to sensitive system files.

CVE-2023-1177 banner

CVE-2023-1177: Path Traversal Vulnerability in MLflow

CVE-2023-1177 refers to a path traversal vulnerability discovered in MLflow, an open-source platform for managing the machine learning lifecycle.

CVE-2024-1561 banner

CVE-2024-1561: Unauthorized Local File Read Vulnerability in Gradio Applications

CVE-2024-1561 is a critical vulnerability identified in Gradio, a popular Python library for building user interfaces for machine learning models.

CVE-2023-32315 banner

CVE-2023-32315: Understanding the Openfire Admin Console Path Traversal Vulnerability

CVE-2023-32315, assigned a severity rating of 9.8 (Critical) by CISA, is a path traversal vulnerability affecting Openfire, an open-source XMPP server widely used for instant messaging and communication.

CVE-2023-2825: A Path Traversal Vulnerability in GitLab

A vulnerability has been discovered in GitLab that could allow an attacker to read arbitrary files on the server. The vulnerability, which has been assigned the CVE identifier CVE-2023-2825, affects GitLab Community and Enterprise Edition version 16.0.0.

Ethical Hacking

Ethical Hacking - Path Traversal