API - API Security Blog

Velociraptor Version 0.6.7: Better Offline Collection, Encryption, and an Improved NTFS Parser Dig Deeper Than Ever

![Velociraptor Version 0.6.7: Better Offline Collection, Encryption, and an Improved NTFS Parser Dig Deeper Than Ever](https://blog.rapid7.com/content/images/2022/12/ThinkstockPhotos-177843422.jpg) _B ...

December 02, 2022

SUSE SLES12 Security Update : tomcat (SUSE-SU-2022:4303-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:4303-1 advisory. - If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0. ...

December 02, 2022

Information Disclosure

github.com/grafana/synthetic-monitoring-agent is vulnerable to information disclosure.The vulnerability exists in multiple functions due to default installation of `synthetic-monitoring-agent` which a ...

December 02, 2022

Researchers Disclose Supply-Chain Flaw Affecting IBM Cloud Databases for PostgreSQL

[![Supply-Chain Flaw](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEhgZbW2cp0e-p4EX0QTxiK4EBxzi5NdqCGzkBkzkOXrYc5qBdR7jdXLzIwWaOuqDls5E-Mio2-JlT-pxumEw1K50rgRBopLlCGamnOY15TathJjxwoah4fJks ...

December 02, 2022

Out-of-Band Detections Using Qualys Periscope

Qualys WAS previously announced the introduction of Qualys Periscope, . This technology allows WAS to detect out-of-band vulnerabilities like server-side request forgery (SSRF). Periscope provides con ...

December 01, 2022

How empowering developers helps teams ship secure software faster

When life is easy for developers, good things happen. ![](https://github.blog/wp-content/uploads/2022/11/niroshan.jpeg?w=150&resize=150%2C150#038;h=150&crop=1)Niroshan Rajadurai Here at GitHub ...

December 01, 2022

CVE-2022-23737

An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to create or delete pages via the API. To exploit this vulnerabili ...

December 01, 2022

Atlassian Crowd 3.x / 4.x < 4.4.4 / 5.x < 5.0.3 Security Bypass (CWD-5888)

The version of Atlassian Crowd installed on the remote host is 3.x, 4.x prior to 4.4.4, or 5.x prior to 5.0.3. It is, therefore, affected by a security bypass vulnerability due to security misconfigur ...

December 01, 2022