Category - API Security Blog

curl: Insecure WebSocket Usage in curl Documentation and Examples (CWE-319: Cleartext Transmission of Sensitive Information)

Vulnerability description not...Read More ...

August 12, 2025

curl: Arbitrary File Read via file:// Protocol in cURL

Vulnerability description not...Read More ...

August 12, 2025

AWS VDP: XSS on Amazon Aquisition: elemental

The XSS vulnerability on Amazon's acquisition of Elemental was identified and addressed. The summary provided a brief overview of the...Read More ...

August 12, 2025

Weblate: exposure of personal IP address via email.

The exposure of personal IP addresses through email messages has been identified as a potential security issue. Email messages can pass through multiple servers, which may store or record the content, ...

August 12, 2025

curl: Unsafe Global IFS Modification in OS400 Shell Script Enables Command Injection and Parsing Flaws (CWE-78/CWE-20)

Vulnerability description not...Read More ...

August 12, 2025

CVE-2025-30027

creation_timestamp| type| source ---|---|--- 2025-08-12 07:54:39+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-8314

creation_timestamp| type| source ---|---|--- 2025-08-12 08:01:01+00:00| seen|...Read More ...

August 12, 2025

CVE-2025-8767

creation_timestamp| type| source ---|---|--- 2025-08-12 07:57:40+00:00| seen|...Read More ...

August 12, 2025