API - API Security Blog

NixImports – A .NET Malware Loader, Using API-Hashing To Evade Static Analysis

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0Zq8zJu8KUW6x6AabU-OR0RAh6f7ncktwNDdnF1BDB_ExxXnb7vYeSvoTmvK92klLZD_BTSKymjXg68SKD5rdJrcKhCo7Ba_RU6dnjYDwHLX0UvH5j7Gp8Ss9dVjvTBKqxnAhc4 ...

August 13, 2023

Exploit for Server-Side Request Forgery in Rbaskets Request Baskets

# CVE-2023-27163 > Request-Baskets v1.2.1 - Server-side reques...Read More ...

August 13, 2023

CVSS3 - MEDIUM

CVSS2 - MEDIUM

2023 OWASP Top-10 Series: API3:2023 Broken Object Property Level Authorization

Welcome to the 4th post in our weekly series on the new [2023 OWASP API Security Top-10]() list, with a particular focus on security practitioners. This post will focus on [API3:2023 Broken Object Pro ...

August 12, 2023

Columbus-Server – API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj83r20JOHBjm61cGPmMNj7DeslxjD94aApEC159HPsyyLrZ96Vmv8mfXsG2JeKj2AttCIxdz5ryZxuS-9D3YT7xg3akX0Wm6jlFeRVJkbbqjKgcOAh58DtURRFSUYyZZegHjNkdZ ...

August 12, 2023

Python Parsing Error Enabling Bypass CVE-2023-24329

### Overview urllib.parse is a very basic and widely used basic URL parsing function in various applications. ### Description An issue in the urllib.parse component of Python before v3.11 allows attac ...

August 11, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM

CVE-2021-26504

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information via crafted request in res.sendFile API in hue-magic.js.Read M ...

August 11, 2023

Metasploit weekly wrap-up

## New module content (1) ### Metabase Setup Token RCE ![Metasploit weekly wrap-up](https://blog.rapid7.com/content/images/2023/08/metasploit-ascii-1-2.png) Authors: Maxwell Garrett, Shubham Shah, and ...

August 11, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

Request-Baskets 1.2.1 Server-Side Request Forgery

Post ContentRead More ...

August 11, 2023

CVSS3 - MEDIUM

CVSS2 - MEDIUM