API - API Security Blog

Exploit for SQL Injection in Sophos Xg Firewall Firmware

# CVE-2022-3710 A post-auth read-only SQL injection vulnerabili...Read More ...

December 23, 2022

CVSS3 - LOW

Exploit for Improper Input Validation in Kubernetes Ingress-Nginx

# CVE-2021-25746 A security issue was discovered in ingress-ngi...Read More ...

December 23, 2022

CVSS3 - HIGH

CVSS2 - MEDIUM

Exploit for Improper Input Validation in Kubernetes Ingress-Nginx

# CVE-2021-25745 A security issue was discovered in ingress-ngi...Read More ...

December 23, 2022

CVSS3 - HIGH

CVSS2 - MEDIUM

Exploit for Cross-site Scripting in Wso2 Api Manager

# CVE-2022-29548 A reflected XSS issue exists in the Management...Read More ...

December 23, 2022

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Reset API any user via IDOR

# Description Reset API any user without taking action from him via IDOR # Proof of Concept 1- Create a user 2- Go to setting 3- Open Burp Suite to object to the requisition 4- Click on it Reset API ...

December 23, 2022

Fedora 36 : python3.9 (2022-b17bf30e88)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-b17bf30e88 advisory. - Python 3.9.x and 3.10.x through 3.10.8 on Linux ...

December 23, 2022

Fedora 36 : drupal7 (2022-9d655503ea)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9d655503ea advisory. - Cross-site scripting (XSS) vulnerability in jqu ...

December 23, 2022

Exploit for CVE-2022-2598

# CVE-2022-2598 Undefined Behavior for Input to API in GitHub r...Read More ...

December 23, 2022

CVSS3 - MEDIUM