Category - API Security Blog

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1207)

The remote host is missing an update for the Huawei EulerOSRead More ...

May 30, 2022

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1208)

The remote host is missing an update for the Huawei EulerOSRead More ...

May 30, 2022

SmartClient 120 Information Disclosure / XML Injection / LFI / Code Execution

Post ContentRead More ...

May 30, 2022

U.S. Dept Of Defense: SharePoint Web Services Exposed to Anonymous Access Users

**Summary:** Any unauthenticated/anonymous users are able to access the SharePoint Web Services (.wsdl files) for the ????? Initiative website. **Description:** The SharePoint installation for this pa ...

May 30, 2022

Kentico CMS Staging SyncServer Unserialize Remote Command Execution

This module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote Command Execution is possible via unauthenticated XML requests to the Staging Service SyncServer.a ...

May 30, 2022

Kentico CMS Staging SyncServer Unserialize Remote Command Execution

This module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote Command Execution is possible via unauthenticated XML requests to the Staging Service SyncServer.a ...

May 30, 2022

juventude.gov.pt Improper Access Control vulnerability OBB-1038249

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 30, 2022

All Vulnerabilities for defesa.gov.pt Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 30, 2022