Category - API Security Blog

CVE-2022-29084

Dell Unity, Dell UnityVSA, and Dell Unity XT versions before 5.2.0.0.5.173 do not restrict excessive authentication attempts in Unisphere GUI. A remote unauthenticated attacker may potentially exploit ...

June 02, 2022

CVE-2022-29718

Caddy v2.4 was discovered to contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim use ...

June 02, 2022

CVE-2022-26866

Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, leading to the storage ...

June 02, 2022

Notionterm – Embed Reverse Shell In Notion Pages

[![](https://blogger.googleusercontent.com/img/a/AVvXsEhJ9iwaL3IPcQi0zGw-dDSkJE8XvX_ACXFbN2RQNMPDJmay1_sgzvLY18gyKKBT-1-KoePezecaHZ57jjoFA2ERn8JMm61ww9OjMXYUU0PFnp069JkQkW3T5FP2mfUvC-VD1gqF4Yzbr_U273- ...

June 02, 2022

RST Threat feed. IOC: https://service-0zzgg1ut-1308635095.bj.apigw.tencentcs.com/api/x

Found **https://service-0zzgg1ut-1308635095[.]bj.apigw.tencentcs....Read More ...

June 02, 2022

RST Threat feed. IOC: https://service-4ng7k4aw-1256691685.gz.apigw.tencentcs.com/api/x

Found **https://service-4ng7k4aw-1256691685[.]gz.apigw.tencentcs....Read More ...

June 02, 2022

RST Threat feed. IOC: https://api.vpn-secure.co/securevpn

Found **https://api[.]vpn-secure.co/securevpn** in ...Read More ...