Exploit - CVE CyberSecurity Database News (Page 283)

Dec 13, 2024 WordPress Exploit

CVE-2023-39920 - Exposing Your WordPress Site with Missing Authorization in Redirection for Contact Form 7

CVE-2023-39920 is a security vulnerability that affects the popular WordPress plugin Redirection for Contact Form 7 (versions up to 2.9.2). This issue results

Dec 12, 2024 RCE Microsoft Exploit Java

CVE-2024-49147 - Microsoft Update Catalog Deserialization Vulnerability – How Attackers Can Elevate Privileges (With Code Example)

--- Summary: In June 2024, CVE-2024-49147 exposed a serious vulnerability in the Microsoft Update Catalog website (https://www.catalog.update.microsoft.com/). The root culprit?

Dec 12, 2024 CSRF Exploit

CVE-2024-8647 - GitLab Harbor Integration Leaks Anti-CSRF Token (Explained With Exploit Tutorial)

Recently, a critical security vulnerability was discovered in GitLab, one of the world’s most popular DevOps platforms. Tracked as CVE-2024-8647, this issue affects self-hosted

Dec 12, 2024 API Exploit

CVE-2024-8233 - How a GitLab Diff Bug Could Crash Your Service — Analysis, Exploit Details, and Fixes

On June 26th, 2024, cybersecurity researchers disclosed a new vulnerability in GitLab, tracked as CVE-2024-8233. This bug affects GitLab Community Edition (CE) and Enterprise Edition

Dec 12, 2024 XSS Exploit

CVE-2024-8179 - GitLab Improper Output Encoding Leads to XSS (Exploit Details & Code Example)

In June 2024, a security issue was identified in GitLab Community Edition (CE) and Enterprise Edition (EE), now tracked as CVE-2024-8179. The bug affects GitLab