Category - API Security Blog

Fedora 35 : drupal7 (2022-bf18450366)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-bf18450366 advisory. - Cross-site scripting (XSS) vulnerability in jqu ...

December 22, 2022

Exploit for OS Command Injection in Contec Conprosys Hmi System

# CVE-2022-44456 CONPROSYS HMI System (CHS) Ver.3.4.4?and earli...Read More ...

December 22, 2022

CVSS3 - CRITICAL

Exploit for Path Traversal in Vmware Vrealize Network Insight

# CVE-2022-31703 vRealize Network Insight (vRNI) directory trav...Read More ...

December 22, 2022

CVSS3 - HIGH

Exploit for Command Injection in Vmware Vrealize Network Insight

# CVE-2022-31702 vRealize Network Insight (vRNI) contains a com...Read More ...

December 22, 2022

CVSS3 - CRITICAL

CVE-2022-3805

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users ...

December 22, 2022

Exploit for Server-Side Request Forgery in Apache Cxf

# CVE-2022-46364 A SSRF vulnerability in parsing the href attri...Read More ...

December 22, 2022

CVSS3 - CRITICAL

Exploit for Missing Authorization in Sap Netweaver Process Integration

# CVE-2022-41272 An unauthenticated attacker over the network c...Read More ...

December 22, 2022

CVSS3 - HIGH