Category - API Security Blog

Oracle Linux 8 : xmlrpc-c (ELSA-2022-1643)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1643 advisory. - xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks ce ...

May 30, 2022

RST Threat feed. IOC: https://bssc.se/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp/full.php

Found **https://bssc[.]se/xmlrpc/dat/member/affwebservices/spid/...Read More ...

May 30, 2022

RST Threat feed. IOC: https://bssc.se/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp/fulls.php

Found **https://bssc[.]se/xmlrpc/dat/member/affwebservices/spid/...Read More ...

May 30, 2022

RST Threat feed. IOC: https://bssc.se/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp/index.html

Found **https://bssc[.]se/xmlrpc/dat/member/affwebservices/spid/...Read More ...

May 30, 2022

RST Threat feed. IOC: https://bssc.se/xmlrpc/dat/member/affwebservices/spid/saml2sso/old/np/mil/nfoaa_auth/login/jsp/que.php

Found **https://bssc[.]se/xmlrpc/dat/member/affwebservices/spid/...Read More ...

May 30, 2022

RHEL 8 : xmlrpc-c (RHSA-2022:1644)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1644 advisory. - expat: Malformed 2- and 3-byte UTF-8 sequences c ...

May 30, 2022

RHEL 8 : xmlrpc-c (RHSA-2022:1643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1643 advisory. - expat: Malformed 2- and 3-byte UTF-8 sequences c ...

May 30, 2022

(RHSA-2022:1644) Important: xmlrpc-c security update

XML-RPC is a remote procedure call (RPC) protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to mak ...

May 30, 2022