SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management - Page 21 of 62

September 10, 2024

Calibre-web 0.6.21 stored XSS vulnerability

Published by SecureLayer7 Lab at September 10, 2024

Calibre-web 0.6.21 Vulnerability Exposes Stored XSS Risk

In the vast landscape of web applications, security vulnerabilities are an ever-present threat. Recently, a significant issue was identified in Calibre-web version 0.6.21, which could expose […]

September 9, 2024

Published by SecureLayer7 Lab at September 9, 2024

Helpdeskz v2.0.2 Stored XSS Vulnerability Explained

Helpdeskz is a popular PHP-based help desk application that streamlines customer service processes. Version 2.0.2 contains a critical security vulnerability: a Stored Cross-Site Scripting (XSS) flaw. […]

September 8, 2024

Published by SecureLayer7 Lab at September 8, 2024

Ivanti vADC 9.9 Authentication Bypass Vulnerability Explained

In the realm of cybersecurity, vulnerabilities can present significant risks to an organization’s security posture. Today, we focus on the Ivanti vADC 9.9 Authentication Bypass Vulnerability, […]

September 7, 2024

Published by SecureLayer7 Lab at September 7, 2024

Oracle Database 12c Unquoted Service Path Vulnerability

Oracle Database 12c is known for its robustness and reliability; however, like any software, it can harbor vulnerabilities. One critical issue that has come to the […]

September 6, 2024

Published by SecureLayer7 Lab at September 6, 2024

SolarWinds Kiwi Syslog Server Vulnerability in 9.6.7.1

Introduction The SolarWinds Kiwi Syslog Server version 9.6.7.1 has been identified as having a significant vulnerability. This flaw might allow unauthorized users to execute malicious payloads […]

September 5, 2024

Published by SecureLayer7 Lab at September 5, 2024

Genexus Protection Server Unquoted Service Path Vulnerability

Genexus Protection Server Unquoted Service Path Vulnerability In the world of cybersecurity, understanding vulnerabilities is key to maintaining robust protection for systems and applications. One such […]

September 5, 2024

Published by SecureLayer7 Lab at September 5, 2024

Top 10 Offensive Security Partners in 2025

As cyber threats become increasingly sophisticated, organizations must stay one step ahead by identifying and addressing vulnerabilities before malicious actors can exploit them. Offensive security, which […]

September 4, 2024

Published by SecureLayer7 Lab at September 4, 2024

Devika v1 Path Traversal Vulnerability Explained

Devika v1 Path Traversal Vulnerability Explained The digital landscape constantly evolves, and so do security vulnerabilities. One such critical vulnerability is the Path Traversal issue discovered […]

September 3, 2024

Published by SecureLayer7 Lab at September 3, 2024

CVE-2024-37084: Spring Cloud Remote Code Execution

CVE-2024-37084 is a critical security vulnerability in Spring Cloud Skipper, specifically related to how the application processes YAML input. The vulnerability arises from the use of […]