Category - API Security Blog

Schneider Electric Pelco Endura NET55XX Encoder – Authentication Bypass (Metasploit)

Post ContentRead More ...

May 30, 2022

Schneider Electric Pelco Endura NET55XX Encoder

Post ContentRead More ...

May 30, 2022

Schneider Electric Pelco Endura NET55XX Encoder

This module exploits inadequate access controls within the webUI to enable the SSH service and change the root password. This module has been tested successfully on: NET5501, NET5501-I, NET5501-XT, NE ...

May 30, 2022

Schneider Electric Pelco Endura NET55XX Encoder

This module exploits inadequate access controls within the webUI to enable the SSH service and change the root password. This module has been tested successfully on: NET5501, NET5501-I, NET5501-XT, NE ...

May 30, 2022

Starbucks: Blind SQLi leading to RCE, from Unauthenticated access to a test API Webservice

@geek_jeremy, at the same time as other hackers who submitted their own reports, discovered a browsable WSDL service on an API endpoint under the starbucks.com.cn domain, running on a non-standard por ...

May 30, 2022

ReadyAPI 2.5.0 2.6.0 – Remote Code Execution

ReadyAPI 2.5.0 2.6.0 - Remote Code ExecutionRead More ...

May 30, 2022

ReadyAPI 2.5.0 / 2.6.0 Remote Code Execution

Post ContentRead More ...

May 30, 2022

ReadyAPI 2.5.0 / 2.6.0 – Remote Code Execution Exploit

Exploit for multiple platform in category web applicationsRead More ...