Jiva Security
jivasecurity.com
Vulnerability Management
Information Security
Penetration Testing
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
Overview
Jiva Security is an independent offensive security consultancy specializing in penetration testing, hardware security, AI/LLM security, and vulnerability research.
News
Formula for Disaster: Chaining EspoCRM
EspoCRM v9.3.3: the built-in formula scripting engine bypasses field-level ACL, enabling an admin to overwrite a path-traversal-sensitive field on file attachments. Combined with an unsanitized file path in the upload storage layer, this yields arbitrary
Read more
Report
Dolibarr 23.0.0: dol_eval() Whitelist Bypass RCE
Zero-day vulnerability in Dolibarr 23.0.0: two cooperating bugs in dol_eval_standard() allow authenticated admin RCE via computed extrafields; chained with default credentials, exploitable without credential guessing on default installations.
Read more
Report