### Summary An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereumâs JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can c ...
Continue ReadingJune 30, 2023
Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.Read More ...
Continue ReadingJune 30, 2023
Apache Tomcat is a lightweight Web application server from the Apache Foundation. The application implements support for Servlet and JavaServer Page (JSP).Apache Tomcat suffers from a request obfuscat ...
Continue ReadingJune 30, 2023
The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which a ...
Continue ReadingJune 30, 2023
# July 7th 2022 Security Releases By Rafael Gonzaga, 2022-07-07 ## _(Update 07-July-2022)_ Security releases available Updates are now available for the v18.x, v16.x, and v14.x Node.js release lines f ...
Continue ReadingJune 30, 2023
**Issue Overview:** It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attacker could possibly use this flaw to execute arbit ...
Continue ReadingJune 30, 2023
Krzysztof, the 360 group focus of the Security Business Unit elucidating the team invented a new type of Office document high-end intimidating onslaught, the è¿å»åºç¨äº9æ12æ� ...
Continue ReadingJune 30, 2023
Post ContentRead More ...
Continue ReadingJune 30, 2023
Back to Main