CVE CyberSecurity Database News (Page 625)

Sep 19, 2024 OAuth

CVE-2024-8883 - Keycloak Misconfiguration Lets Attackers Steal Login Tokens with Open Redirects

Keycloak is a popular tool for single sign-on (SSO) and identity management, powering login systems for many organizations. But in early 2024, a new

Sep 19, 2024 Exploit Java Google

CVE-2024-7254 - How Deeply Nested Protocol Buffers Groups Can Crash Your App—Exploiting Stack Overflow via Recursive Parsers

If your app uses Protocol Buffers to receive data—especially from untrusted sources—you must pay attention. A recently disclosed issue, tracked as CVE-2024-

Sep 18, 2024

CVE-2024-46801 - Linux Kernel libfs `get_stashed_dentry()` RCU Lock Bypass – Analysis & Exploit

Linux is one of the most widely used operating systems powering everything from web servers to smartphones. Security vulnerabilities in the Linux kernel have far-

Sep 18, 2024

CVE-2024-46797 - PowerPC Linux Kernel QSpinlock MCS Queue Deadlock – Deep Dive, Cause, and Fix

On Linux PowerPC systems, a subtle but critical kernel bug (CVE-2024-46797) was found and fixed in the implementation of qspinlock's MCS

Sep 18, 2024

CVE-2024-46795 - Null Pointer Dereference in Linux Kernel KSMBD Session Setup—Analysis, Exploit, and Patch

On May 2024, a critical Linux kernel vulnerability affecting the SMB (Server Message Block) daemon, specifically KSMBD (the in-kernel SMB3 file server), was resolved