CVE CyberSecurity Database News (Page 663)

Aug 20, 2024 Exploit

CVE-2024-7305 - How A Malicious DWF File Can Compromise Your Autodesk AutoCAD

In early 2024, a serious vulnerability—CVE-2024-7305—was discovered in Autodesk AutoCAD. The flaw centers on the way the AdDwfPdk.dll library inside

Aug 19, 2024 Exploit Apache

CVE-2024-7592 - The Cookie Monster in CPython – Low Severity but High Annoyance

If you work with Python web apps, you probably rely on the http.cookies module for handling user cookies. Recently, CPython (the standard Python implementation)

Aug 19, 2024 Exploit Google

CVE-2024-32927 - Critical Use-After-Free in Android Radio HAL (sendDeviceState_1_6) Explained

On April 2024, security researchers identified a critical vulnerability in Android’s Radio Hardware Abstraction Layer (HAL), tracked as CVE-2024-32927. This bug allows

CVE-2024-43286 - SQL Injection Vulnerability in Squirrly SEO Plugin – Full Analysis and Exploit

Aug 18, 2024 WordPress Exploit SQL PHP

CVE-2024-43286 - SQL Injection Vulnerability in Squirrly SEO Plugin – Full Analysis and Exploit

The WordPress plugin ecosystem is often a double-edged sword: it enables powerful site features, but sometimes introduces security risks. Recently, a serious vulnerability surfaced

Aug 17, 2024

CVE-2024-42294 - Linux Kernel Deadlock Fixed Between `sd_remove` & `sd_release`

CVE-2024-42294 identifies a major deadlock in the Linux kernel block subsystem. The flaw could cause filesystem operations, such as formatting or writing, to