Exploit - CVE CyberSecurity Database News (Page 562)

Apr 18, 2024 RCE Exploit

CVE-2024-26921 - Preventing Use-After-Free in Linux Kernel Inet Defrag Code

Linux networking is complex and powerful, allowing high performance, flexible filtering, and encapsulation. However, complexity also increases the risk of subtle bugs, especially in areas

Apr 17, 2024 Exploit Google Chrome

CVE-2024-3914 - Understanding and Exploiting the Use-After-Free in Chrome V8 Engine

--- Summary CVE-2024-3914 is a critical use-after-free vulnerability discovered in the V8 JavaScript engine, impacting Google Chrome versions prior to 124..6367.

Apr 17, 2024 Exploit

CVE-2024-26920 - Linux Kernel tracing/trigger Vulnerability Explained—Technical Analysis, Code & Exploit Details

--- TL;DR A bug in the Linux kernel’s register_snapshot_trigger() function could let a malicious user register a “snapshot” trigger even if the

Apr 17, 2024 API Exploit Red Hat Red Hat Single Sign-On 7.6 for RHEL 7

CVE-2024-1249 - How a Small Keycloak OIDC Flaw in checkLoginIframe Enables Massive DDoS & Exploitation

Keycloak, the popular open-source identity and access management tool, is widely used to secure web applications. In early 2024, a security flaw tagged CVE-

Apr 17, 2024 Exploit OAuth Red Hat Red Hat build of Keycloak 22

CVE-2024-2419 - Keycloak’s Redirect_URI Bypass, Token Theft Made Easy

Keycloak is a pretty popular open-source identity and access management tool, commonly used to handle login and single sign-on (SSO) for web applications.