CVE-2023-38503 - Unauthorized Data Leak via GraphQL Subscriptions in Directus (Exploit & Details)
Directus is a popular, open-source headless CMS that acts as both an app dashboard and real-time API for SQL databases. In 2023, a
CVE-2023-37920 - The Hidden Impact of the Certifi "e-Tugra" Root Certificate Removal
In July 2023, a subtle but impactful security change rippled through the Python ecosystem: Certifi, the widely-used bundle of trusted Certificate Authorities (CAs), issued
CVE-2023-37257 - DataEase Stored XSS Vulnerability Explained – Code Example, Exploit, and How to Stay Safe
Published: 2024-06-20
*Author: Security Insights Team*
What is CVE-2023-37257?
CVE-2023-37257 is a stored cross-site scripting (XSS) vulnerability found
CVE-2023-35943 - How Envoy’s CORS Filter Bug Can Crash Your Proxy (And How to Fix It)
Envoy is a popular open source edge and service proxy widely used in cloud-native environments. Because it sits between your users and your backend,
CVE-2023-35942 - Critical Envoy Proxy “Use-After-Free” Vulnerability Explained
Envoy Proxy is a popular open-source edge and service proxy, vital in many cloud-native infrastructures. But like any powerful tool, it can have
Episode
00:00:00
00:00:00