Category - API Security Blog

ONVIF Stream URI

Nessus was able to retrieve the remote devices video stream URI(s) by sending GetProfiles and GetStreamUri ONVIF requests.Read More ...

June 30, 2023

U.S. Dept Of Defense: SharePoint exposed web services

Microsoft SharePoint is a web application platform developed by Microsoft. Because of improper configuration an anonymous user has access to the SharePoint Web Services. The impact of this vulnerabili ...

June 30, 2023

OWASP Top 10 2017 is Released

#### The Journey to the New and Improved Ten Most Critical Web Application Security Risks It was not too long ago that protecting your web server infrastructure consisted of simply placing the server( ...

June 30, 2023

Systematic SitAware – NVG Denial of Service

Post ContentRead More ...

June 30, 2023

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Systematic SitAware NVG Denial Of Service

Post ContentRead More ...

June 30, 2023

U.S. Dept Of Defense: SOAP WSDL Parser SQL Code Execution

**Summary:** SOAP WSDL Parser SQL Code Execution **Description:** It was possible to parse WSDL resources and read all functions from the SOAP Admin Panel, therefor i was able to repeat the sql query ...

June 30, 2023

ZDResearch Advanced Web Hacking Training 2018 â Learn Online

[![ZDResearch certified ethical hacking training course](https://thehackernews.com/images/-mLGBnnzqmyY/W6kSxLBN1sI/AAAAAAAAyMw/O-1IY1DDNGYVu6hIXsoUPAnTZgLkc3nvACLcBGAs/s728-e100/ZDResearch-online-cert ...

June 30, 2023

Information Disclosure

axis is vulnerable to information disclosure attacks. The vulnerability exists through the exception message after requesting for a non-existent WSDL file, leaking sensitive information.Read More ...

June 30, 2023

CVSS2 - MEDIUM