CVE-2022-22947 In earlier versions of the gateway, applications are vulnerable to code injection if the Gateway Actuator endpoint is enabled, exposed and unsecured.
The Gateway Actuator endpoint was previously enabled by default in versions prior to 3.1.1+ and 3.0.7+ by default. The endpoint could
CVE-2022-25089 Printix uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData.
The issue allows attackers to execute arbitrary code on the target system.
CVE-2018-9448 A critical vulnerability has been identified in Microsoft Excel that
CVE-2022-22916 - Remote Code Execution in O2OA v6.4.7 via /x_program_center/jaxrs/invoke
In the world of enterprise collaboration software, O2OA is a popular, open-source platform widely used for business process management in China. However, it sometimes
CVE-2022-24112 - How Attackers Bypass IP Restrictions in APISIX’s Batch-Requests Plugin (with Exploit Details)
Published: June, 2024
Author: Security Insights Lab
Apache APISIX is a widely used open-source API gateway. It helps organizations route, secure, and manage their
CVE-2022-0557 OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
It has been fixed in version 1.2.12. In older versions, attackers could inject an arbitrary command as GET or POST request parameter by
Episode
00:00:00
00:00:00