Category - API Security Blog

Exploit for CVE-2022-30136

# Cve-2022-30136-RCE CVE-2022-30136 Unauthenticated RCE in Micro...Read More ...

June 16, 2022

Security Updates for Microsoft Office Products C2R (June 2022)

The Microsoft Office Products are missing security updates. It is, therefore, affected by a remote code execution vulnerability. An authenticated attacker can exploit this to execute arbitrary code on ...

June 16, 2022

CVE-2021-36609

Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php.Read More ...

June 16, 2022

CVE-2021-33295

Cross Site Scripting (XSS) vulnerability in Joplin Desktop App before 1.8.5 allows attackers to execute aribrary code due to improper sanitizing of html.Read More ...

June 16, 2022

CVE-2021-46820

Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.phpRead More ...

June 16, 2022

CVE-2020-28865

An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save.Read More ...

June 16, 2022

CVE-2021-36608

Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php.Read More ...

June 16, 2022

CVE-2022-31295

An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.Read More ...

June 16, 2022