API - API Security Blog

CVE-2023-38949

An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request.Read More ...

August 04, 2023

CVE-2023-38950

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload.Read More ...

August 04, 2023

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 24, 2023 to July 30, 2023)

Last week, there were 64 vulnerabilities disclosed in 66 WordPress Plugins and 3 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 32 Vulnerabi ...

August 03, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

Exploit for Missing Authorization in Wpmet Metform Elementor Contact Form Builder

# CVE-2022-1442 WordPress Plugin Metform <= 2.1.3 - Improper ...Read More ...

August 03, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM

PrivKit – Simple Beacon Object File That Detects Privilege Escalation Vulnerabilities Caused By Misconfigurations On Windows OS

[![](https://blogger.googleusercontent.com/img/a/AVvXsEhUuZJSO5HgKHDxtpT1g2u_BQda5hzIsSp1YjJULHZCocCr-A3VoEJ1VTFcqtVvv2BvPxPT3KescAdRA2bRwV93-Ri9DnmpSBpipFvc_mLkSZze8xSPPhhBblfTvkf30ne1vJ8w6XN1qJb3r08 ...

August 03, 2023

CVE-2023-33368

Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.Read More ...

August 03, 2023

Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

[![Ivanti EPMM Vulnerability](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Cybersecurity researchers have discovered a bypass ...

August 03, 2023

Arbitrary Code Injection

org.apache.nifi:* is vulnerable to Arbitrary Code Injection. The vulnerability exists in several functions which allows an authenticated attacker to submit a malicious request to configure a location ...

August 03, 2023