Category - API Security Blog

Updated xmlrpc-c packages fix security vulnerability

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. (CVE-2022-25235)Read More ...

May 30, 2022

RST Threat feed. IOC: https://getleanfasttoday.com/xmlrpc/cots/webde.htm

Found **https://getleanfasttoday[.]com/xmlrpc/cots/webde.htm** ...Read More ...

May 30, 2022

xmlrpc-c bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.Read More ...

May 30, 2022

RST Threat feed. IOC: https://itfsindia.com/wp-includes/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp

Found **https://itfsindia[.]com/wp-includes/xmlrpc/dat/member/af...Read More ...

May 30, 2022

RST Threat feed. IOC: https://itfsindia.com/wp-includes/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp/fulls.php

Found **https://itfsindia[.]com/wp-includes/xmlrpc/dat/member/af...Read More ...

May 30, 2022

RST Threat feed. IOC: https://itfsindia.com/wp-includes/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp/full.php

Found **https://itfsindia[.]com/wp-includes/xmlrpc/dat/member/af...Read More ...

May 30, 2022

RST Threat feed. IOC: https://thosewebbs.com/wp-content/plugins/prevent-xmlrpc/2

Found **https://thosewebbs[.]com/wp-content/plugins/preve...Read More ...

May 30, 2022

RST Threat feed. IOC: https://thosewebbs.com/wp-content/plugins/prevent-xmlrpc/3

Found **https://thosewebbs[.]com/wp-content/plugins/preve...Read More ...

May 30, 2022