API - API Security Blog

PT-2025-35556

E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application...Read More ...

September 02, 2025

CVE-2025-2414

creation_timestamp| type| source ---|---|--- 2025-09-02 12:49:48+00:00| seen|...Read More ...

September 02, 2025

CVE-2025-6519

creation_timestamp| type| source ---|---|--- 2025-09-02 12:44:48+00:00| seen|...Read More ...

September 02, 2025

CVE-2025-52547

creation_timestamp| type| source ---|---|--- 2025-09-02 12:39:47+00:00| seen|...Read More ...

September 02, 2025

RHSA-2025:14999 Red Hat Security Advisory: resource-agents security update

Bulletin has no...Read More ...

September 02, 2025

CVE-2025-52545

E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application...Read More ...

September 02, 2025

CVE-2024-58259

A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on certain public (unauthenticated) and authenticated API endpoints. This allows a ma ...

September 02, 2025

CVE-2025-5662

A deserialization vulnerability exists in the H2O-3 REST API (POST /99/ImportSQLTable) that affects all versions up to 3.46.0.7. This vulnerability allows remote code execution (RCE) due to improper v ...

September 02, 2025