API - API Security Blog

CVE-2025-54781 Himmelblau leaks an Intune service access token in its logs

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaud_tasks service leaks an Intune service access ...

August 01, 2025

CVE-2025-54781 Himmelblau leaks an Intune service access token in its logs

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaud_tasks service leaks an Intune service access ...

August 01, 2025

CVE-2011-3315

creation_timestamp| type| source ---|---|--- 2025-08-01 21:02:25+00:00| seen|...Read More ...

August 01, 2025

CVE-2014-125121

creation_timestamp| type| source ---|---|--- 2025-08-01 21:02:24+00:00| seen|...Read More ...

August 01, 2025

CVE-2014-125123

creation_timestamp| type| source ---|---|--- 2025-08-01 21:02:24+00:00| seen|...Read More ...

August 01, 2025

Hashicorp Vault has Incorrect Validation for Non-CA Certificates

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|https://develope ...

August 01, 2025

Microweber has Reflected XSS Vulnerability in the id Parameter

Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module_settings API endpoint in Microweber CMS2.0 allows execution of arbitrary...Read More ...

August 01, 2025

EUVD-2025-23391

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|https://develope ...

August 01, 2025