CVE-2023-44483 - Info Leak in Apache Santuario - XML Security for Java (Private Key Disclosure)
A critical vulnerability has surfaced in Apache Santuario - XML Security for Java, tracked as CVE-2023-44483. All versions before 2.2.6, 2.3.
CVE-2023-38546 - Exploiting Cookie Injection in libcurl via Easy Handle Duplication
Published: June 2024
Severity: Medium-High
Component: libcurl (7.9.1 to 8.3.)
Original Advisory: curl.se/security/advisory
Reference Doc: curl_easy_duphandle(
CVE-2023-45810 - How OpenFGA’s ListObjects Bug Can Break Your Authorization Service
OpenFGA is quickly becoming a popular choice among developers for flexible permissions and authorization logic, inspired by the famous Google Zanzibar paper. But like any
CVE-2023-22067 - Vulnerability in Oracle Java SE and GraalVM CORBA Component Allows Unauthorized Data Modification
On July 18, 2023, Oracle published a security advisory about a vulnerability—CVE-2023-22067—affecting Oracle Java SE and Oracle GraalVM Enterprise Edition. The
CVE-2023-22025 - Exploiting Integrity Flaws in Oracle Java SE & GraalVM Hotspot
CVE-2023-22025 is a security vulnerability that affects multiple Oracle Java and GraalVM distributions. Though officially rated as “difficult to exploit,” this flaw opens
Episode
00:00:00
00:00:00