API - API Security Blog

CVE-2023-33293

An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed applications, e.g., myapp.localhost. An a ...

May 22, 2023

eBankIT 6 Arbitrary OTP Generation

Post ContentRead More ...

May 22, 2023

Hades – Go Shellcode Loader That Combines Multiple Evasion Techniques

[![](https://blogger.googleusercontent.com/img/a/AVvXsEh8XU1QePrxHorPh-ja1u7LLtj_VpULIVuWklYusXLVqscBk9Ezmq5Is4mnwpeGEjVc1NBzNLUcqQzy6anZOkuMrWX7GHcMWcU89rKj10keMpPNDMXSbXPdutgtb_cXdtXMU1UZN_MgPVeG_jn ...

May 22, 2023

Are Your APIs Leaking Sensitive Data?

[![API Security](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() It's no secret that data leaks have become a major concern for b ...

May 22, 2023

GLSA-202305-24 : MediaWiki: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-24 (MediaWiki: Multiple Vulnerabilities) - MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not esca ...

May 22, 2023

AlmaLinux 8 : edk2 (ALSA-2023:2932)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2932 advisory. - A timing based side channel exists in the OpenSSL RSA ...

May 21, 2023

Dumpulator – An Easy-To-Use Library For Emulating Memory Dumps. Useful For Malware Analysis (Config Extraction, Unpacking) And Dynamic Analysis In General (Sandboxing)

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEp6TRhlK2Fr2tQnWUsosOSltmxbWjsK7DWgP6YYybIFotsAKSM8yLzMgQ8b83bKhTnNkEUGFq9hnaYw_eJPt4nUzJ4CrhN7rhPLIRNZkEmyrL-8vrlDIVf7bsbDWXmHDcaK20h0 ...

May 20, 2023

Cisco DNA Center Information Disclosure (cisco-sa-dnac-infodisc-pe7zAbdR)

The version of Cisco DNA Center installed on the remote host is prior to 2.3.3.7 or is 2.3.5.0. It may, therefore, be affected by an information disclosure vulnerability if configured for PnP operatio ...

May 20, 2023