API - API Security Blog

F5 BIG-IP iControl Cross Site Request Forgery

Post ContentRead More ...

November 21, 2022

(Pwn2Own) Microsoft Teams electronSafeIpc Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Teams. No user interaction is required if the attacker and target are in the same Teams orga ...

November 21, 2022

Sandbox_Scryer – Tool For Producing Threat Hunting And Intelligence Data From Public Sandbox Detonation Output

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEkO_7BLm2yIe2Fg8yqCr8240TtKpuXiqbBiPpcj2nEHt3TMqh5bx4C4zXmnbiAKy5Qyvx2PWJnKoJLjX5dfLD4mLRIvPZYq6pjCUiGFMd4WQZJGMQ_B1eagaeSPZ3AnsDpJVnmS ...

November 21, 2022

Four Steps: Effective API Security Using a Digital Bonding Strategy

Focus on API security as part of your digital bonding strategy, because APIs are already connecting your business activities.Read More ...

November 21, 2022

CVE-2022-3691

The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information in its log files (which are publicly accessible), including DeepL API key.Read More ...

November 21, 2022

CVE-2022-3589

An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write acc ...

November 21, 2022

CVSS3 - HIGH

CVE-2022-45146

An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is p ...

November 21, 2022

CVE-2022-45132

In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configura ...

November 19, 2022