API - API Security Blog

Open Automation Software OAS Platform REST API unauthenticated vulnerability

### Summary An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to ...

May 30, 2022

Undefined behavior when users supply invalid resource handles

### Impact Multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid: ```python import tensorflow as tf tf.raw_ops.QueueIsClosedV2(handle=[]) ``` ```p ...

May 30, 2022

Missing validation causes denial of service via `LSTMBlockCell`

### Impact The implementation of [`tf.raw_ops.LSTMBlockCell`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/rnn/lstm_ops.cc) does not f ...

May 30, 2022

Frida-Ios-Hook – A Tool That Helps You Easy Trace Classes, Functions, And Modify The Return Values Of Methods On iOS Platform

[![](https://blogger.googleusercontent.com/img/a/AVvXsEjRpifhvjdd6zzAj1WZwtUY9GLC2kNMVGZqw9cwEzjrtrp3yn6eRkU5o13Y3Vh9n7-o46gZVNmnkSRiDhOC8hJZoBg6qs2o_srS86-748iiLiRYMiBfkBHAfUpnsB8ZTv_lDMoey_0ZfL2IQ-4 ...

May 30, 2022

Cross-domain cookie leakage in Guzzle

### Impact Previous version of Guzzle contain a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets th ...

May 30, 2022