API - API Security Blog

SUSE SLED15 / SLES15 Security Update : rustup (SUSE-SU-2022:3949-1)

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3949-1 advisory. - An issue was discovered in the to ...

November 15, 2022

SCMKit – Source Code Management Attack Toolkit

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSFHzfp_0fwm8HENFxmHuIDfxDmOe-1lAo3YiqDCfxVfzb6JovdYIpJyMKGu03c1J-Yc7ADqT-v2LOMoalLkj7T-IWLlTLzh4puPwy8mlYpWn0SHrlbxzrcKaKu4yc6qIMb7nR6G ...

November 15, 2022

Jenkins Pipeline SCM API for Blue Ocean Plugin Unauthorized Access Vulnerability

The Blue Ocean Plugin is an aggregation tool designed for Jenkins Pipeline, and is of course compatible with free-style projects. It graphically illustrates the flow of the pipeline, making it more in ...

November 15, 2022

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images

[![Worok Malware](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEjjyImt_ja580R1Rb_X6991WjylIGhY1WTIta0-H1lX34KBTUakEygTmXDIaiXfPu11Fh0T6CuhkTALy2C7y9yuQdab_sfKUb2gBsQ-0a3yY9jgliDC3-prKY1G9W ...

November 15, 2022

GraphQL Security: The Next Evolution in API Protection

![GraphQL Security: The Next Evolution in API Protection](https://blog.rapid7.com/content/images/2022/11/bloghero-1.jpeg) GraphQL is an open-source data query and manipulation language that can be use ...

November 15, 2022

Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass

Post ContentRead More ...

November 15, 2022

VMware NSX Manager XStream Unauthenticated Remote Code Execution

Post ContentRead More ...

November 15, 2022

CVSS3 - HIGH

CVSS2 - MEDIUM

pki-core:10.6 and pki-deps:10.6 security and bug fix update

apache-commons-collections apache-commons-net [3.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3 ...

November 15, 2022

CVSS3 - HIGH