CVE-2024-38063

CVE-2024-38063 - Explotando el kernel de forma remota mediante IPv6 Desde que cayó el último parche de Windows el 13 de agosto, he estado metido de lleno en tcpip.sys el controlador del kernel responsable de manejar los paquetes TCP/IP. Una vulnerabilidad con una puntuación CVSS de 9.8 en la part...

WordPress WooCommerce Upload Files Plugin <= 84.3 is vulnerable to Arbitrary File Upload

Software WooCommerce Upload Files Type Plugin Vulnerable versions = 84.3 Fixed in 84.4 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-10820 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 2047e0da8994 Credits Tonn Required privilege...

CVE-2024-21082

CVE-2024-21082 affects Oracle BI Publisher (Oracle Analytics), specifically the XML Services component. Affected versions are 7.0.0.0.0 and 12.2.1.4.0. The root cause is insufficient input validation in XML Services, enabling an unauthenticated attacker with network access via HTTP to compromise ...

Patch CVE-2023-23397 Immediately: What You Need To Know and Do

We break down the basic information of CVE-2023-23397, the zero-day, zero-touch vulnerability that was rated 9.8 on the Common Vulnerability Scoring System CVSS scale...