CVE CyberSecurity Database News

Sep 9, 2024 CSS PHP

CVE-2024-45411: Twig Sandbox Security Bypass Vulnerability and Its Impact on Web Applications

Twig is a widely used template language for PHP, allowing developers to separate the presentation layer (HTML, CSS, JavaScript) from the logic layer (PHP). This

Sep 8, 2024 Exploit SQL Java

CVE-2024-8568 - Critical Vulnerability Discovered in Mini-Tmall Up to 20240901 Allows SQL Injection

A severe security vulnerability, classified as critical, has been discovered in all versions of Mini-Tmall up to 20240901. The vulnerability stems from improper handling of

Sep 7, 2024 Exploit

CVE-2023-39333: A Deep Dive into the Exploitation of WebAssembly Module Code Injection Vulnerability in Node.js

In this post, we will be taking a detailed look at a recently discovered vulnerability (CVE-2023-39333) within the WebAssembly module in Node.js, which allows

Sep 7, 2024

CVE-2023-46809: Node.js Versions Vulnerable to Marvin Attack via Unpatched OpenSSL and PKCS #1 v1.5 Padding in RSA Decryption

Hello everyone! Today, we will be discussing a critical security vulnerability that affects Node.js versions that bundle unpatched versions of OpenSSL or run against

Sep 7, 2024 Exploit

CVE-2023-30584 - Node.js Version 20 Experimental Permission Model Path Traversal Bypass Vulnerability

Attention Node.js developers! A new vulnerability, labeled CVE-2023-30584, has been uncovered in Node.js version 20, affecting its experimental permission model. The cybersecurity community