Exploit for Code Injection in Apache Commons Text

# CVE-2022-42889-MASS-RCE (another LOG4SHELL) Mass exploitation ...Read More ...

Continue Reading

CVSS3 - CRITICAL

CVE-2022-23770

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute ...

Continue Reading
CVE-2022-3325

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-2992

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-2884

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading
CVE-2022-31130

Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destination plugins under ...

Continue Reading
8 KB is not enough: why WAFs can’t protect APIs

WAFs were a top-notch security instrument a decade ago, but now they are not. They fail to protect APIs. Meanwhile, the number of API-specific vulnerabilities grew more than twofold in 2022. According ...

Continue Reading
JSubFinder – Searches Webpages For Javascript And Analyzes Them For Hidden Subdomains And Secrets

[![](https://blogger.googleusercontent.com/img/a/AVvXsEjm5NSa3GKAkHOW8JDrD-GoLhTldiqLuvjecH7tpQBfT0d9ZdzG4N6HJpHJ39xsfRan7Rpj5Fl42Avaou8q_rkB-MapaTicEBcTNH5uA35Ud-PXxZUpGQxPTsaKvccSGa6T2CXoPK0E_NwEhpt ...

Continue Reading

Back to Main

Subscribe for the latest news: