Looking at the Attack Surfaces of the Kenwood DMX958XR IVI

November 21, 2024 | Connor Ford CONTINUE READING

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

Blog post

Vulnerabilities in Apache Batik Default Security Controls – SSRF and RCE Through Remote Class Loading

October 31, 2022
Apache, Batik, Research

CVE-2021-44790: Code Execution on Apache via an Integer Underflow

Blog post

CVE-2021-44790: Code Execution on Apache via an Integer Underflow

January 25, 2022
Apache, Research

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

Blog post

CVE-2021-45105: Denial of Service via Uncontrolled Recursion in Log4j StrSubstitutor

December 18, 2021
Log4j, Apache, Research

CVE-2021-25646: Getting Code Execution on Apache Druid

Blog post

CVE-2021-25646: Getting Code Execution on Apache Druid

March 29, 2021
Apache, Druid, Research

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

Blog post

CVE-2019-0230: Apache Struts OGNL Remote Code Execution

October 07, 2020
Apache, Research, Struts

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

Blog post

CVE-2020-9496: RCE in Apache OFBiz XMLRPC via Deserialization of Untrusted Data

September 16, 2020
Apache, Research

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch

Blog post

Apache Groovy Deserialization: A Cunning Exploit Chain to Bypass a Patch

December 19, 2017
Apache, Research, Top 5