Category - API Security Blog

CVE-2022-33989

dproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot time) in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not en ...

15 августа, 2022

CVE-2022-33991

dproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.Read Mor ...

15 августа, 2022

RedGuard – C2 Front Flow Control Tool, Can Avoid Blue Teams, AVs, EDRs Check

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnlJkIKeeinYR2Ob_vLz_T2KUfA0Attaog2LS5O0LV7aniivC2XbPeSlzGSZmhJPPGbsVrWFG-Cot5fzfuF2VV5nydW6wkqgPW_6fy3sH7mJiFosFREp460IW-VLwaZLZ5EUdNL ...

15 августа, 2022

CVE-2022-2657

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

15 августа, 2022

CVE-2022-2597

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

15 августа, 2022

Exploit for Vulnerability in Microsoft

# CVE-2022-24500-RCE CVE-2022-24500 Windows SMB Remote Code Exec...Read More ...

15 августа, 2022

CVSS3 - HIGH

CVSS2 - MEDIUM

Exploit for Vulnerability in Microsoft

# CVE-2022-26809-POC metasploit module for CVE-2022-26809 window...Read More ...

15 августа, 2022

CVSS3 - CRITICAL

CVSS2 - HIGH

autorefinishes.co.kr Cross Site Scripting vulnerability OBB-2848559

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

15 августа, 2022