The latest quarterly review and analysis of API vulnerabilities and exploits is in. Our initial take had us thinking it was smooth sailing for the state of API vulnerabilities in Q3âor was it jus ...
Continue ReadingNovember 15, 2022
A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Mod ...
Continue ReadingNovember 15, 2022
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Mo ...
Continue ReadingNovember 15, 2022
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterpr ...
Continue ReadingNovember 15, 2022
[![Indian Bank Hacking](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEipOou_PIjqMD9GwGMxORN6GR5WFa94FnSD78iOmg0ZTe8ijdPGh_z2IWA7nzikRe6rU7cIXbP4nq79TX82E5wogZPcRKDWVgFUtnqqek6nFXFUg6R9R0Sm ...
Continue ReadingNovember 15, 2022
# Impact _What kind of vulnerability is it? Who is impacted?_ This is an API vulnerability in Redwood's [dbAuth], specifically the dbAuth forgot password feature: - only projects with the dbAuth "forg ...
Continue ReadingNovember 15, 2022
# Impact _What kind of vulnerability is it? Who is impacted?_ This is an API vulnerability in Redwood's [dbAuth], specifically the dbAuth forgot password feature: - only projects with the dbAuth "forg ...
Continue ReadingNovember 15, 2022
### Impact This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain (readthedocs[.]org/readthedocs[.]com) by exploiting a vulnerability in the code th ...
Continue ReadingNovember 15, 2022
Back to Main