Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.
CVE-2024-21216 | Oracle WebLogic Server leads to Full Server Takeover (Critical). Read More »
CVEs, Bug Bounty, Web
Identified as CVE-2024-40711, Veeam Backup & Replication versions before 12.1. 2.172 allows a threat actor to gain access to unauthenticated remote code execution through an underlying unprotected deserialization vulnerability, and achieves a critical CVSS score of 9.8
CVE-2024-40711 | Criticle UnAuth RCE In Veeam BackUP and Replication Read More »
CVEs, Bug Bounty, Recon, Web
CVE-2024-45409 is usefull for authentication bypass using vulnerability found in Ruby-saml.
CVE-2024-45409 | Ruby-SAML Auth Bypass In GitLab Read More »
CVEs, Bug Bounty, Recon, Web
CVE-2024-8353 | givewp plugin vulnerable to PHP object injection more then 100K wordpress application are using givewp plugin.
CVE-2024-8353 | GiveWP WordPress Plugin Vulnerable to PHP Object Injection Read More »
CVEs, Bug Bounty, CTF, OSINT, Recon, Web