API - API Security Blog

Bouncy Castle For Java LDAP injection vulnerability

Bouncy Castle provides the X509LDAPCertStoreSpi.java class which can be used in conjunction with the CertPath API for validating certificate paths. Pre-1.73 the implementation did not check the X.500 ...

July 07, 2023

Bouncy Castle For Java LDAP injection vulnerability

Bouncy Castle provides the X509LDAPCertStoreSpi.java class which can be used in conjunction with the CertPath API for validating certificate paths. Pre-1.73 the implementation did not check the X.500 ...

July 07, 2023

CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could hav ...

July 07, 2023

CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could hav ...

July 07, 2023

Secrets, Secrets Are No Fun. Secrets, Secrets (Stored in Plain Text Files) Hurt Someone

[![](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Secrets are meant to be hidden or, at the very least, only known to a specif ...

July 07, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

BugChecker – SoftICE-like Kernel Debugger For Windows 11

[![](https://blogger.googleusercontent.com/img/a/AVvXsEiiIADjrRs_TLCBefDgik1GdLQBAklt0r9ebRvY1ZNZ0WA2l-JWEaG3A2AD1KxAnV13lQGSha1CQULbvt6RcTe-553H_zXXpwhqwhJJcWyT83UKSpFGU3f2NCuIB8s5lAao21eAafgsCvnREGQ ...

July 07, 2023

CVE-2023-30586

A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or disable the permissi ...

July 07, 2023

Exploit for Exposure of Resource to Wrong Sphere in Servicenow