API - CVE CyberSecurity Database News (Page 246)

Oct 26, 2023 API Exploit Java Elastic Elasticsearch

CVE-2023-31418 - How Malformed HTTP Requests Can Crash Your Elasticsearch Node

A critical vulnerability, tracked as CVE-2023-31418, was discovered in Elasticsearch that could let a remote attacker take down an Elasticsearch instance without authentication. It doesn’

Oct 25, 2023 API Exploit Kubernetes ingress-nginx

CVE-2023-5044 - Code Injection via `nginx.ingress.kubernetes.io/permanent-redirect` Annotation Exploit Explained

Kubernetes has become a standard for running containerized applications, and NGINX Ingress is one of the most popular ways to expose services. However, even simple

Oct 25, 2023 API Mac Apple macOS

CVE-2023-42854 - How a macOS Bug Could Crash Your Security Tools

Apple computers are known for their security, but sometimes even the best slip up. In this article, we’re diving deep into CVE-2023-42854, a vulnerability

Oct 25, 2023 API iOS Exploit Apple macOS

CVE-2023-42849 - A Deep Dive into Apple Kernel Memory Mitigation Bypass

In late 2023, Apple patched a serious vulnerability tracked as CVE-2023-42849 in several of its operating systems. This bug, if exploited, allowed attackers who already

Oct 25, 2023 API Mac Google Apple macOS

CVE-2023-40404 - How a Simple Use-After-Free Bug Let Apps Control the macOS Kernel (and How Apple Fixed It)

--- Apple systems are often celebrated for their strong security. But even the best platforms can have weak points. CVE-2023-40404 is one of those rare