Java - CVE CyberSecurity Database News (Page 64)

Nov 10, 2023 API Exploit Java Apache Sysaid

CVE-2023-47246 - How Attackers Exploited SysAid's Path Traversal Bug for Code Execution

In November 2023, security researchers discovered a dangerous vulnerability (CVE-2023-47246) in the SysAid On-Premise platform, versions before 23.3.36. The bug

Nov 8, 2023 API Java Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

CVE-2023-4061 - Exploiting Wildfly-Core’s resolve-expression Flaw For Sensitive Information Disclosure

In August 2023, a serious vulnerability (CVE-2023-4061) was disclosed in Wildfly-Core, an important management framework used in many enterprise Java applications. This

Nov 3, 2023 Windows Java Galaxy Software Services Vitals ESP

CVE-2023-41357 - Exploiting File Upload Vulnerability in Galaxy Software Services Vitals ESP

In September 2023, Galaxy Software Services Corporation’s Vitals ESP—their online knowledge base management portal—was found to have a severe file upload vulnerability.

Nov 1, 2023 Java Apache PHP Bitrix24

CVE-2023-1713 - How Insecure Temporary File Creation in Bitrix24 Could Let Hackers Run Their Code

In this post, we're diving deep into CVE-2023-1713, a vulnerability that affects Bitrix24's Instagram order import feature. Written for

Oct 27, 2023 API Java Google Android

CVE-2023-40116 - Bypassing Android’s Background Activity Launch Restrictions via PipTaskOrganizer.java

In this write-up, we’ll dig deep into CVE-2023-40116 — a vulnerability that slipped into Android’s PipTaskOrganizer.java, letting apps sneak past