Category - API Security Blog

SmartClient 120 Information Disclosure / XML Injection / LFI / Code Execution

Post ContentRead More ...

May 30, 2022

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1208)

The remote host is missing an update for the Huawei EulerOSRead More ...

May 30, 2022

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1207)

The remote host is missing an update for the Huawei EulerOSRead More ...

May 30, 2022

MTN Group: SharePoint exposed web services in a subdomain

Hi there I found a subdomain that is sharepoint configuration is poorly implemented Because of improper configuration an anonymous user can access to the SharePoint Web Services. POC: Go to the follow ...

May 30, 2022

juventude.gov.pt Improper Access Control vulnerability OBB-1038249

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 30, 2022

All Vulnerabilities for defesa.gov.pt Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 30, 2022

Visual Studio 2008 – XML External Entity Injection

Post ContentRead More ...

May 30, 2022

Visual Studio 2008 – XML External Entity Injection

Visual Studio 2008 - XML External Entity InjectionRead More ...

May 30, 2022