API - CVE CyberSecurity Database News (Page 166)

May 23, 2024 API Exploit SOAP

CVE-2024-5291 - D-Link DIR-215 "GetDeviceSettings" Command Injection — Remote Code Execution Made Simple

A critical vulnerability, CVE-2024-5291, has been discovered in the popular D-Link DIR-215 Wi-Fi router. This flaw allows attackers on the same network—or anyone able

May 23, 2024 API Exploit

CVE-2024-5201 - Privilege Escalation Vulnerability in OpenText Dimensions RM Explained

--- What is CVE-2024-5201? In early June 2024, a new security vulnerability named CVE-2024-5201 was disclosed in OpenText Dimensions RM, a tool widely used for

May 23, 2024 API Exploit Google

CVE-2024-31843 - Command Injection in Italtel Embrace 1.6.4 Uncovered – Exploit Walkthrough and Analysis

--- Overview CVE-2024-31843 exposes a critical vulnerability in Italtel Embrace 1.6.4, a web conferencing and collaboration solution widely used by enterprises. This flaw

May 23, 2024 API Exploit SQL Java PHP

CVE-2024-35091 - Exploiting SQL Injection in J2EEFAST v2.7. via the `findPage` Function

In June 2024, a serious SQL injection vulnerability dubbed CVE-2024-35091 was disclosed for the open-source enterprise rapid development framework J2EEFAST version 2.7.. This bug

May 23, 2024 API Exploit

CVE-2024-5168 - How Hackers Bypass Authentication on Prodys Quantum Audio Codec (Exclusive, Simple Explanation & Code)

A new critical security vulnerability — CVE-2024-5168 — has been discovered affecting Prodys’ Quantum Audio Codec, specifically all firmware versions up to and including 2.3.4t.