API - API Security Blog

How Microsoft Purview and Priva support the partner ecosystem

Today, many enterprise organizations are multicloud and multiplatform. Critical enterprise data is located across clouds and platforms, requiring security and compliance no matter where it lives. To s ...

July 20, 2022

Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely The Hacker News

[![Unpatched GPS Tracker](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEiDDmvHrFQPCSS68XdSpaRz5Lcgfb9qfBWnyANwheuwTnZ4Yu8y7rXbHtx2RsuFqUo-e0FycWG1e5nteCm-7pqpxN5W3p10VwbDCQZTbvYAOxvWgcYeTp ...

July 20, 2022

WordPress Easy Student Results plugin <= 2.2.8 – Sensitive Information Disclosure via REST API vulnerability

Sensitive Information Disclosure via REST API vulnerability discovered by Raad Haddad in WordPress Easy Student Results plugin (versions Read More ...

July 19, 2022

CVE-2022-34534

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call.Read More ...

July 19, 2022

Dell Wyse Management Suite < 3.8 Multiple Vulnerabilities (DSA-2022-134)

The version of Dell Wyse Management Suite installed on the remote host is prior to 3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-134 advisory. - Wyse Mana ...

July 19, 2022

CVE-2022-36305

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1/upload/UploadHandler.php.Read More ...

July 19, 2022

CVE-2022-36303

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php.Read More ...

July 19, 2022

CVE-2022-36304

Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php.Read More ...

July 19, 2022