Category - API Security Blog

U.S. Dept Of Defense: SharePoint Web Services Exposed to Anonymous Access Users

**Summary:** Any unauthenticated/anonymous users are able to access the SharePoint Web Services (.wsdl files) for the ????? Initiative website. **Description:** The SharePoint installation for this pa ...

May 30, 2022

SmartClient 120 Information Disclosure / XML Injection / LFI / Code Execution

Post ContentRead More ...

May 30, 2022

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1208)

The remote host is missing an update for the Huawei EulerOSRead More ...

May 30, 2022

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1207)

The remote host is missing an update for the Huawei EulerOSRead More ...

May 30, 2022

MTN Group: SharePoint exposed web services in a subdomain

Hi there I found a subdomain that is sharepoint configuration is poorly implemented Because of improper configuration an anonymous user can access to the SharePoint Web Services. POC: Go to the follow ...

May 30, 2022

juventude.gov.pt Improper Access Control vulnerability OBB-1038249

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 30, 2022

All Vulnerabilities for defesa.gov.pt Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

May 30, 2022

Visual Studio 2008 – XML External Entity Injection

Post ContentRead More ...

May 30, 2022