API - CVE CyberSecurity Database News (Page 321)

Jun 1, 2023 API Exploit Splunk Splunk Enterprise

CVE-2023-32707 - How Low-Privileged Users Can Become Admins in Splunk with a Simple Web Request

Splunk is a big name when it comes to searching, monitoring, and analyzing machine-generated data. But in early 2023, a serious security flaw was found

May 30, 2023 API Exploit Google Chrome

CVE-2023-2929 - Out of Bounds Write in SwiftShader in Google Chrome—Remote Exploit Explored

--- Introduction In June 2023, Google patched a high-severity vulnerability identified as CVE-2023-2929 affecting the SwiftShader component used in Google Chrome. Prior to version 114.

May 30, 2023 API PHP Imagemagick

CVE-2023-34153 - Shell Command Injection in ImageMagick via Video Options (Easy Guide & Exploit Details)

ImageMagick is a super popular tool used by web developers, graphic designers, and application platforms for editing, converting, and generating images and videos. But what

May 30, 2023 API Exploit Google Chrome

CVE-2023-2941 - Google Chrome Extension UI Spoofing—How Attackers Take Advantage of Bad Extensions

CVE-2023-2941 is a security bug that affects Google Chrome’s Extensions API. Discovered in early 2023, this flaw allowed tricky developers to build Chrome extensions

May 25, 2023 API Atlassian Confluence Data Center

CVE-2023-22504 - How Broken Access Control in Atlassian Confluence Lets Users Upload Files Without Write Access

Access control is one of the cornerstones of web application security. When it fails, even in subtle ways, attackers can often do things they shouldn’