API - CVE CyberSecurity Database News (Page 112)

Dec 5, 2024 XSS API SQL

CVE-2024-54128 - Directus Comment Feature HTML Injection Vulnerability Explained

Directus is a popular open-source toolkit that gives teams a user-friendly dashboard and API to manage SQL database content. One handy feature in Directus is

Dec 5, 2024 API Exploit

CVE-2024-40763 - Heap-based Buffer Overflow in SonicWall SMA100 SSLVPN—Inside the strcpy Timebomb

--- Summary A newly disclosed vulnerability, CVE-2024-40763, impacts SonicWall's SMA100 SSLVPN devices through a critical heap-based buffer overflow in the firmware. This flaw

Dec 5, 2024 RCE API Exploit

CVE-2024-48839 - Remote Code Execution in ABB ASPECT, NEXUS, and MATRIX (v3.08.02) Explained

*Posted: June 2024* *Author: InfosecDigest Exclusive* A newly disclosed vulnerability, CVE-2024-48839, affects three popular building automation platforms from ABB: ASPECT – Enterprise, NEXUS Series, and MATRIX

CVE-2022-41137 - Practical Guide to Exploiting Apache Hive Metastore RCE via Unsafe Deserialization

Dec 5, 2024 API Java Apache

CVE-2022-41137 - Practical Guide to Exploiting Apache Hive Metastore RCE via Unsafe Deserialization

In 2022, a severe vulnerability was discovered in Apache Hive Metastore (HMS): CVE-2022-41137. This security issue can allow an attacker to remotely execute code on

Dec 4, 2024 API Exploit

CVE-2024-53129 - Practical Guide to the Linux Kernel drm/rockchip VOP Vulnerability

CVE-2024-53129 refers to a recently addressed vulnerability in the Linux Kernel, specifically tied to the Rockchip Direct Rendering Manager (DRM) Video Output Processor (VOP) driver.