Poster - CVE CyberSecurity Database News (Page 485)

Nov 29, 2024 RCE API Exploit

CVE-2024-11482 - ESM 11.6.10 Unauthenticated Remote Code Execution via Snowservice API

A critical vulnerability tracked as CVE-2024-11482 has been discovered in ESM (Enterprise Service Manager) version 11.6.10, a widely-used platform in enterprise environments. This

Nov 28, 2024 Exploit

CVE-2024-8299 - DLL Search Order Hijack in ICONICS GENESIS64 and Mitsubishi Electric GENESIS64/MC Works64 — What You Need to Know

A new vulnerability tagged as CVE-2024-8299 has been recently uncovered, impacting the widely used ICONICS GENESIS64 suite and Mitsubishi Electric GENESIS64/MC Works64 industrial automation

Nov 28, 2024 Exploit SQL PHP

CVE-2024-11970 - Critical SQL Injection in Concert Ticket Ordering System 1. ([/tour(cor).php?mai=]) – Analysis, Exploit, and Mitigation

In early 2024, a severe security vulnerability surfaced in the Concert Ticket Ordering System 1. developed by code-projects, marked as CVE-2024-11970. This is a SQL

Nov 28, 2024 RCE API Apache

CVE-2024-52338 - Critical RCE Vulnerability in Apache Arrow R Package via Untrusted Data Deserialization

A critical security vulnerability, tracked as CVE-2024-52338, has been discovered in the Apache Arrow R package. This vulnerability allows arbitrary code execution (RCE) due to

Nov 28, 2024 Exploit

CVE-2023-52922 - Use-After-Free Vulnerability in Linux Kernel CAN BCM (bcm_proc_show) – Analysis, Exploitation, and Patch

*Last updated: June 2024* Introduction A new Linux kernel vulnerability was found and fixed – CVE-2023-52922. The bug resided in the CAN BCM (Broadcast Manager) module,