API - API Security Blog

CVE-2025-58037

creation_timestamp| type| source ---|---|--- 2025-08-23 05:30:08+00:00| seen|...Read More ...

August 23, 2025

CVE-2024-50644

zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any...Read More ...

August 23, 2025

GHSA-GCQF-PXGG-GW8Q Dpanel has an arbitrary file read vulnerability

Summary Dpanel has an arbitrary file read vulnerability in the /api/app/compose/get-from-uri interface.Logged in to Dpanel ,this interface can be used to read arbitrary files. Details When a user logs ...

August 23, 2025

Dpanel has an arbitrary file read vulnerability

Summary Dpanel has an arbitrary file read vulnerability in the /api/app/compose/get-from-uri interface.Logged in to Dpanel ,this interface can be used to read arbitrary files. Details When a user logs ...

August 23, 2025

CVE-2024-48988

creation_timestamp| type| source ---|---|--- 2025-08-22 17:23:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwyxw5gsjc22 2025-08-22 18:38:45+00:00| seen| https://infosec.exchang ...

August 23, 2025

CVE-2025-57770

creation_timestamp| type| source ---|---|--- 2025-08-22 17:22:10+00:00| seen|...Read More ...

August 23, 2025

CVE-2024-50644

zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any...Read More ...

August 23, 2025

Rust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety

The API of xcb::Connection has constructors which allow an arbitrary RawFd to be used as a socket connection. On either failure of these constructors or on the drop of Connection, it closes the associ ...

August 23, 2025