Category - API Security Blog

CVE-2020-28036

wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges by using XML-RPC to comment on a post.Read More ...

30 мая, 2022

Critical: xmlrpc-c

**Issue Overview:** A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, from start tag names) to the XML processing application on top of expat can lead to arbitra ...

30 мая, 2022

Critical: xmlrpc-c

**Issue Overview:** A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, from start tag names) to the XML processing application on top of expat can lead to arbitra ...

30 мая, 2022

Amazon Linux AMI : xmlrpc-c (ALAS-2022-1585)

The version of xmlrpc-c installed on the remote host is prior to 1.22.04-r1934.7. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1585 advisory. - xmltok_impl.c in Expat ...

30 мая, 2022

Amazon Linux 2 : xmlrpc-c (ALAS-2022-1795)

The version of xmlrpc-c installed on the remote host is prior to 1.32.5-1905.svn2451. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1795 advisory. - xmltok_impl.c in ...

30 мая, 2022

RST Threat feed. IOC: https://thosewebbs.com/wp-content/plugins/prevent-xmlrpc/1

Found **https://thosewebbs[.]com/wp-content/plugins/preve...Read More ...

30 мая, 2022

Schneider Electric Pelco Endura NET55XX Encoder – Authentication Bypass Exploit

Post ContentRead More ...

30 мая, 2022

Schneider Electric Pelco Endura NET55XX Encoder – Authentication Bypass (Metasploit)

Post ContentRead More ...