API - API Security Blog

RST Threat feed. IOC: https://service-4ng7k4aw-1256691685.gz.apigw.tencentcs.com/api/x

Found **https://service-4ng7k4aw-1256691685[.]gz.apigw.tencentcs....Read More ...

June 02, 2022

RST Threat feed. IOC: https://api.vpn-secure.co/securevpn

Found **https://api[.]vpn-secure.co/securevpn** in ...Read More ...

June 02, 2022

RST Threat feed. IOC: https://api.vpn-secure.co/securevpn/register

Found **https://api[.]vpn-secure.co/securevpn/register...Read More ...

June 02, 2022

RST Threat feed. IOC: https://cs.qaxqax.xyz:8443/api/3

Found **https://cs[.]qaxqax.xyz:8443/api/3** in [RST Threat F...Read More ...

June 02, 2022

CVE-2021-43512

An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cause unspecified consequences due to being able to decompile a local application a ...

June 02, 2022

CVE-2022-31004

CVEProject/cve-services is an open source project used to operate the CVE services API. A conditional in 'data.js' has potential for production secrets to be written to disk. The affected method write ...

June 02, 2022

CVE-2022-25237

Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /.. ...

June 02, 2022

CVE-2020-28246

A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL.Read More ...

June 02, 2022