Exploit - CVE CyberSecurity Database News (Page 403)

Aug 20, 2024 Microsoft API Exploit Apache

CVE-2024-38175 - How Improper Access Control in Azure Managed Cassandra Lets Attackers Elevate Privileges

> Published: June 2024 > By: Security Research Team Microsoft Azure’s Managed Instance for Apache Cassandra is one of the most popular managed NoSQL

Aug 20, 2024 API Exploit

CVE-2024-6322 - Bypassing Access Control in Plugin Data Sources via Misapplied ReqActions in plugin.json

A critical security vulnerability, CVE-2024-6322, was recently discovered in systems that utilize plugin-based data sources. This issue allows users with legitimate access to any data

CVE-2024-27185 - Exploiting Arbitrary Parameters in Pagination Links for Cache Poisoning Attacks

Aug 20, 2024 CSRF XSS Exploit

CVE-2024-27185 - Exploiting Arbitrary Parameters in Pagination Links for Cache Poisoning Attacks

In early 2024, a major web vulnerability was identified under CVE-2024-27185, affecting websites that use certain Pagination libraries to split up long lists of content.

Aug 20, 2024 Exploit Java

CVE-2024-38808 - Exploiting SpEL for DoS in Spring Framework (Simple Explanation & Example)

In June 2024, the Spring Framework team announced a critical vulnerability in Spring Framework versions 5.3. – 5.3.38 (including some older, unsupported versions)

Aug 20, 2024 RCE WordPress Exploit PHP

CVE-2024-5932 - Critical PHP Object Injection Vulnerability in GiveWP WordPress Plugin (Up to 3.14.1) – Exploit Details and Mitigation

--- What is CVE-2024-5932? *CVE-2024-5932* refers to a serious vulnerability found in the GiveWP – Donation Plugin and Fundraising Platform for WordPress, affecting all versions up