CVE-2023-4807 - OpenSSL POLY1305 Bug on Windows 64-bit with AVX512-IFMA — How It Could Break Your Server
A subtle but potentially dangerous flaw has been found in OpenSSL’s implementation of the POLY1305 message authentication code (MAC) when running on Windows 64-
CVE-2023-39240 - Format String Vulnerability in ASUS RT-AX56U V2 (`set_iperf3_cli.cgi`) - Full Breakdown & Exploit Details
---
The ASUS RT-AX56U V2 is a popular dual-band Wi-Fi 6 router used in many homes and offices. In August 2023, security researchers
CVE-2023-0925 - Unauthenticated Remote Code Execution in webMethods OneData via Exposed Java RMI
In early 2023, a critical vulnerability—CVE-2023-0925—was discovered in webMethods OneData (version 10.11), a popular data management platform by Software AG.
CVE-2021-36023 - XML Injection in Magento Widgets Leads to Remote Code Execution
CVE-2021-36023 is an _XML Injection_ flaw in the Widgets "Update Layout" functionality within the Magento admin backend. An attacker with administrator
CVE-2023-39359 - Privilege Escalation & Remote Code Execution in Cacti via Authenticated SQL Injection
Cacti is a widely-used open source monitoring tool for network and server infrastructure. In November 2023, a critical security vulnerability, CVE-2023-39359, was
Episode
00:00:00
00:00:00