CVE-2023-36553 - OS Command Injection in Fortinet FortiSIEM – A Deep Dive
Fortinet FortiSIEM is a recognized name in the network security world, providing organizations with robust tools to gather and analyze security event data. Unfortunately, like
CVE-2023-47246 - How Attackers Exploited SysAid's Path Traversal Bug for Code Execution
In November 2023, security researchers discovered a dangerous vulnerability (CVE-2023-47246) in the SysAid On-Premise platform, versions before 23.3.36. The bug quickly became a
CVE-2023-4061 - Exploiting Wildfly-Core’s resolve-expression Flaw For Sensitive Information Disclosure
In August 2023, a serious vulnerability (CVE-2023-4061) was disclosed in Wildfly-Core, an important management framework used in many enterprise Java applications. This vulnerability, if left
CVE-2023-41357 - Exploiting File Upload Vulnerability in Galaxy Software Services Vitals ESP
In September 2023, Galaxy Software Services Corporation’s Vitals ESP—their online knowledge base management portal—was found to have a severe file upload vulnerability.
CVE-2023-1713 - How Insecure Temporary File Creation in Bitrix24 Could Let Hackers Run Their Code
In this post, we're diving deep into CVE-2023-1713, a vulnerability that affects Bitrix24's Instagram order import feature. Written for technical readers
Episode
00:00:00
00:00:00