API - API Security Blog

CVE-2023-22680

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin Read More ...

March 20, 2023

What Proposed New Changes in the OWASP API Security Top 10 Mean for You

The new OWASP Top 10 for API Security release candidate is a fantastic step in an API-specific direction, emphasizing the distinct nature of API threats.Read More ...

March 20, 2023

NimPlant – A Light-Weight First-Stage C2 Implant Written In Nim

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTvWF-hWsmT64ueqlJxKqahZ8Vo-V7hh064x6tkQ-wH1l_RYIeb5qn78iM_Fb4GXoH-zjpIz6OgdHdSbyBp4EeBvpwY_TbUXXKml5uuWVeUiXTHcQIW02Kr6APuaGHKOCZeIlhI_ ...

March 20, 2023

Exploit for Path Traversal in Icinga Icinga Web 2

March 20, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM

[SECURITY] Fedora 36 Update: gnutls-3.8.0-2.fc36

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access t ...

March 19, 2023

CVSS3 - HIGH

[SECURITY] Fedora 36 Update: guile-gnutls-3.7.11-1.fc36

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access t ...

March 19, 2023

CVSS3 - HIGH

CVE-2023-28609

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.Read More ...

March 18, 2023

CVE-2023-1484

A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to ...

March 18, 2023