CVE-2024-32030 - Remote Code Execution in Kafka UI via JMX/RMI Deserialization
A high-severity vulnerability, CVE-2024-32030, was found in Kafka UI, a popular open-source tool for managing Apache Kafka clusters. The flaw allows attackers to execute arbitrary
CVE-2024-37902 - Critical Path Traversal Flaw in DeepJavaLibrary (DJL) Lets Attackers Overwrite Files on Your System
A serious vulnerability, CVE-2024-37902, was discovered in the DeepJavaLibrary (DJL), a widely-used deep learning framework for Java. DJL supports multiple deep learning engines and is
CVE-2024-35079 - Arbitrary File Upload Leads to Remote Code Execution in Inxedu v2024.4
In June 2024, a serious security flaw was discovered in Inxedu v2024.4, a widely used educational management system. This vulnerability, now cataloged as CVE-2024-35079,
CVE-2024-35091 - Exploiting SQL Injection in J2EEFAST v2.7. via the `findPage` Function
In June 2024, a serious SQL injection vulnerability dubbed CVE-2024-35091 was disclosed for the open-source enterprise rapid development framework J2EEFAST version 2.7.. This bug
CVE-2024-35090 - Exploiting SQL Injection in J2EEFAST v2.7.’s SysUreportFileMapper.xml
In June 2024, a dangerous SQL injection vulnerability, now designated CVE-2024-35090, was disclosed in J2EEFAST v2.7.. This issue affects the findPage function defined in
Episode
00:00:00
00:00:00