Poster - CVE CyberSecurity Database News (Page 600)

CVE-2024-38016 - Microsoft Office Visio Remote Code Execution Vulnerability Explained

Sep 19, 2024 RCE Windows Microsoft Exploit

CVE-2024-38016 - Microsoft Office Visio Remote Code Execution Vulnerability Explained

--- Microsoft Office Visio, a tool many companies use to make diagrams and flowcharts, recently faced a serious security problem. This post breaks down CVE-2024-38016,

Sep 19, 2024 Exploit

CVE-2024-8698 - How a Keycloak SAML Signature Validation Flaw Opens the Door to Impersonation

In early 2024, a significant security vulnerability was discovered in Keycloak’s handling of SAML signatures, registered as CVE-2024-8698. If your organization uses Keycloak for

Sep 19, 2024 OAuth

CVE-2024-8883 - Keycloak Misconfiguration Lets Attackers Steal Login Tokens with Open Redirects

Keycloak is a popular tool for single sign-on (SSO) and identity management, powering login systems for many organizations. But in early 2024, a new misconfiguration

Sep 19, 2024 Exploit Java Google

CVE-2024-7254 - How Deeply Nested Protocol Buffers Groups Can Crash Your App—Exploiting Stack Overflow via Recursive Parsers

If your app uses Protocol Buffers to receive data—especially from untrusted sources—you must pay attention. A recently disclosed issue, tracked as CVE-2024-7254, exposes

Sep 18, 2024

CVE-2024-46801 - Linux Kernel libfs `get_stashed_dentry()` RCU Lock Bypass – Analysis & Exploit

Linux is one of the most widely used operating systems powering everything from web servers to smartphones. Security vulnerabilities in the Linux kernel have far-reaching