API - API Security Blog

CVE-2025-34510

creation_timestamp| type| source ---|---|--- 2025-06-17 19:52:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114700449431770143 2025-06-17 21:41:41+00:00| seen|...Read More ...

June 17, 2025

CVE-2025-37780

creation_timestamp| type| source ---|---|--- 2025-06-17 21:38:25+00:00| seen|...Read More ...

June 17, 2025

CVE-2025-49154

creation_timestamp| type| source ---|---|--- 2025-06-17 21:46:42+00:00| seen|...Read More ...

June 17, 2025

CVE-2024-54458

creation_timestamp| type| source ---|---|--- 2025-06-17 21:38:25+00:00| seen|...Read More ...

June 17, 2025

Langflow Unauth RCE

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary...Re ...

June 17, 2025

CVE-2010-4270

creation_timestamp| type| source ---|---|--- 2025-06-17 21:02:20+00:00| seen|...Read More ...

June 17, 2025

CVE-2025-34509 Sitecore XM and XP Hardcoded Credentials

Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain ...

June 17, 2025

CVE-2025-5990

An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form...Read M ...

June 17, 2025