Webinar: Join us for the latest in API Threats on January 24, 2024

In today's complex digital landscape, the security of APIs has become paramount. As we move into 2024, it's essential to stay ahead of the evolving API security threats and vulnerabilities. ...

Continue Reading
What Is Dynamic DNS

Delving into the Multiple Aspects of the Dynamic Domain Name Protocol (DDNS): A Detailed Scrutiny DDNS, standing for Dynamic Domain Name System, is an automatic procedure crafted to maintain the synch ...

Continue Reading
POST SMTP Mailer Plugin for WordPress < 2.8.8 Authorization Bypass

The WordPress POST SMTP Mailer Plugin installed on the remote host is affected by an authorization bypass vulnerability via type connect-app API. Note that the scanner has not tested for these issues ...

Continue Reading
CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday issued an emergency directive urging Federal Civilian Executive Branch (FCEB) agencies to implement mitigations against two a ...

Continue Reading
github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

Impact The Argo CD API prior to versions 2.10-rc2, 2.9.4, 2.8.8, and 2.7.16 are vulnerable to a cross-server request forgery (CSRF) attack when the attacker has the ability to write HTML to a page on ...

Continue Reading
CVE-2024-23686

DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log...Read ...

Continue Reading
CVE-2024-23329

changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint /api/v1/watch/&lt;uuid&gt;/history can be accessed by any unau ...

Continue Reading
github.com/argoproj/argo-cd Cross-Site Request Forgery vulnerability

Impact The Argo CD API prior to versions 2.10-rc2, 2.9.4, 2.8.8, and 2.7.16 are vulnerable to a cross-server request forgery (CSRF) attack when the attacker has the ability to write HTML to a page on ...

Continue Reading

Back to Main

Subscribe for the latest news: