API - API Security Blog

CVE-2023-32003

`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp() API and the impact is a ...

August 17, 2023

Why You Need Continuous Network Monitoring?

[![Network Monitoring](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Changes in the way we work have had significant implicatio ...

August 17, 2023

CVE-2023-32003

`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp() API and the impact is a ...

August 17, 2023

Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks

[![Russian Hackers](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() An ongoing campaign targeting ministries of foreign affairs o ...

August 17, 2023

Redeye – A Tool Intended To Help You Manage Your Data During A Pentest Operation

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-y3KJIqmnW3hxcDVKYM_6gl2t5DQC8qwNCa-7cmo17J1mMhR37d2d2Z_Hcfn1MqCoIvMoaEoVRWCs9ewNccS2DVU-0eoiFwDsBaDVLHJzv7118v7zWqm5gVjuPDX6vRYlB2BqDm ...

August 17, 2023

InfoHound – An OSINT To Extract A Large Amount Of Data Given A Web Domain Name

[![](https://blogger.googleusercontent.com/img/a/AVvXsEiup9WtDzHQdS_VxehwvwdswmT-mRATSaz6ZniPIGTYMiq-Xb6wK5QxySEQumFej4uoHMCIoaUAao_XCxWEaDGvQO5bBdY2Ag2E2PwStKy2-p4TTgszE91QU1Hv73itdnxev0mjVYT97c3wqnc ...

August 17, 2023

CVE-2023-33237

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API hand ...

August 17, 2023

CVE-2023-20232

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

August 17, 2023