RCE - CVE CyberSecurity Database News (Page 114)

Feb 20, 2024 RCE Windows Exploit Java Apache

CVE-2024-23114 - Understanding the Apache Camel CassandraQL AggregationRepository Unsafe Deserialization Flaw

A serious vulnerability—CVE-2024-23114—was discovered in Apache Camel's CassandraQL AggregationRepository component. This flaw exposes applications to unsafe deserialization attacks whenever the repository

Feb 20, 2024 RCE Windows Mac Exploit

CVE-2024-1553 - Memory Safety Bugs in Firefox & Thunderbird—What You Need to Know (and Exploit Details)

TL;DR: CVE-2024-1553 is a set of memory safety issues found in Mozilla’s popular products—Firefox, Firefox ESR, and Thunderbird. These bugs can potentially

Feb 20, 2024 RCE API Exploit Apache

CVE-2023-49109 - How Remote Code Execution Haunted Apache DolphinScheduler (with Exploit Details)

--- Apache DolphinScheduler is a popular open-source platform for orchestrating data pipelines. But in late 2023, cyber researchers discovered a serious vulnerability—CVE-2023-49109—that exposed

Feb 16, 2024 RCE Microsoft Bluetooth

CVE-2024-0031 - Out-of-Bounds Write in att_protocol.cc Allows Remote Code Execution with No User Interaction

A new critical vulnerability, CVE-2024-0031, has been discovered in the popular Bluetooth stack implementation, specifically within the function attp_build_read_by_type_value_cmd

Feb 13, 2024 RCE Windows Microsoft Exploit SQL Windows 11 version 22H2

CVE-2024-21420 - Remote Code Execution in Microsoft WDAC OLE DB Provider for SQL Server—Details, Exploit, and Mitigation

--- Introduction In early 2024, Microsoft quietly patched a critical vulnerability—CVE-2024-21420—in the Windows Defender Application Control (WDAC) OLE DB Provider for SQL Server.