API - API Security Blog

CVE-2025-20248

creation_timestamp| type| source ---|---|--- 2025-09-10 16:34:32+00:00| seen|...Read More ...

September 10, 2025

CVE-2025-8696

creation_timestamp| type| source ---|---|--- 2025-09-10 15:39:54+00:00| seen| https://bsky.app/profile/isc.org/post/3lyikxqgc2c2o 2025-09-10 15:40:36+00:00| seen|...Read More ...

September 10, 2025

CVE-2025-57573

creation_timestamp| type| source ---|---|--- 2025-09-10 16:46:01+00:00| seen|...Read More ...

September 10, 2025

CVE-2025-29592

creation_timestamp| type| source ---|---|--- 2025-09-10 16:43:42+00:00| seen|...Read More ...

September 10, 2025

CVE-2025-59034 Indico may disclose unauthorized user details access via legacy API

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, a legacy API to retrieve user details could be misused to retri ...

September 10, 2025

CVE-2025-59034

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, a legacy API to retrieve user details could be misused to retri ...

September 10, 2025

CVE-2025-59034 Indico may disclose unauthorized user details access via legacy API

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, a legacy API to retrieve user details could be misused to retri ...

September 10, 2025

CVE-2025-56413

OS Command injection vulnerability in function OperateSSH in 1panel 2.0.8 allowing attackers to execute arbitrary commands via the operation parameter to the /api/v2/hosts/ssh/operate...Read More ...

September 10, 2025