API - CVE CyberSecurity Database News (Page 248)

Oct 25, 2023 API Exploit OpenSSL

CVE-2023-5363 - Truncation and Overruns in Key/IV Handling in OpenSSL Symmetric Ciphers

*Published: Exclusive, Simple American Language, with Examples and Exploitation Details* Introduction CVE-2023-5363 is a recently discovered vulnerability in OpenSSL (versions 3. and 3.1) that

Oct 25, 2023 Windows API Exploit Google Chrome

CVE-2023-5472 - Use-After-Free in Google Chrome Profiles – Exploit Explanation & Deep Dive

On October 2023, the Chromium security team patched a critical use-after-free vulnerability in Google Chrome’s Profiles system, tracked as CVE-2023-5472. Before Chrome version 118.

Oct 25, 2023 API Exploit rabbitmq rabbitmq-server

CVE-2023-46118 - RabbitMQ HTTP API Denial of Service via Oversized Requests

On October 25, 2023, a critical vulnerability was disclosed affecting RabbitMQ, a popular open-source message broker used by organizations worldwide. Known as CVE-2023-46118, this bug

Oct 25, 2023 Windows Microsoft API Exploit Java geoserver

CVE-2023-41339 - How GeoServer’s Dynamic Styling Feature Led to Server-Side Request Forgery (SSRF) and NetNTLMv2 Hash Leaks

GeoServer is a popular, open-source server built in Java, used around the world by organizations—from small research groups to government agencies—to share and

Oct 20, 2023 API SOAP Java Apache Apache Software Foundation Apache Santuario

CVE-2023-44483 - Info Leak in Apache Santuario - XML Security for Java (Private Key Disclosure)

A critical vulnerability has surfaced in Apache Santuario - XML Security for Java, tracked as CVE-2023-44483. All versions before 2.2.6, 2.3.4,