CVE-2024-42330 - Exploiting HttpRequest Object’s Header Handling for Prototype Pollution in JavaScript
In June 2024, CVE-2024-42330 shed light on a subtle but powerful security flaw involving the HttpRequest object in common JavaScript libraries and environments.
CVE-2024-42331 - Understanding the Use-After-Free Bug in Zabbix’s Duktape Integration
On June 2024, a critical security vulnerability was disclosed in Zabbix, an enterprise-grade open source monitoring tool. This bug, CVE-2024-42331, centers on
CVE-2024-42326 - How a Use-After-Free Bug in browser.c’s `es_browser_get_variant` Enabled Critical Exploitation
On June 10, 2024, a critical vulnerability—CVE-2024-42326—was disclosed affecting a number of applications using the es_browser_get_variant function in
CVE-2024-42327 - Zabbix API SQL Injection Exploit in CUser.get – How Any API User Can Hack Your Database
---
Introduction
Yet another major security hole has been found in the world of network monitoring—this time in Zabbix, the popular open-source platform used
CVE-2024-11667 - Directory Traversal in Zyxel ATP, USG FLEX, and USG20(W)-VPN – Exploit Details and Practical Example
Zyxel’s security appliances are commonly used in offices and remote work locations. Recently, a serious vulnerability (CVE-2024-11667) was discovered in the web
Episode
00:00:00
00:00:00