Poster - CVE CyberSecurity Database News (Page 415)

Dec 22, 2024 CSRF

CVE-2024-56311 - Exploiting CSRF in REDCap’s Calendar Notes for Forced Logout

*June 2024 – Written exclusively for security practitioners and REDCap users.* CVE-2024-56311 uncovers a flaw in REDCap up to version 14.9.6 that lets attackers

Dec 20, 2024 Exploit

CVE-2020-13712 - Command Injection Vulnerability Affecting OMG200 and MG90 Devices

Sometimes, vulnerabilities seem to slip through the cracks despite developers' best efforts to keep their applications secure. One such vulnerability has recently come to

Dec 20, 2024 Windows Java Apache

CVE-2024-56337 - Understanding the New TOCTOU Race Condition in Apache Tomcat (With Exploit Explanation & Mitigation Guide)

Published: June 2024 Overview A serious vulnerability, tracked as CVE-2024-56337 [NVD link], has been discovered in Apache Tomcat, one of the most widely used Java

Dec 20, 2024 API

CVE-2022-34159 - How Input Verification Issues in Huawei Printers Can Disrupt Operations

In 2022, a new vulnerability was uncovered in some Huawei printer devices. This flaw, tracked as CVE-2022-34159, concerns a problem with *input verification*. If an

Dec 20, 2024

CVE-2022-32204 - Exploiting Improper Input Verification in Huawei Printers (HWPSIRT-2022-87185)

Modern printers, especially in enterprise environments, are no longer simple document spitting machines. They’re networked computers with their own complex software stacks, which, unfortunately,