GraphQL - API Security Blog

Hasura GraphQL 2.2.0 Information Disclosure

Post ContentRead More ...

30 мая, 2022

Hasura GraphQL 2.2.0 – Information Disclosure

Post ContentRead More ...

30 мая, 2022

Hasura GraphQL 2.2.0 – Information Disclosure Exploit

Post ContentRead More ...

30 мая, 2022

CVE-2022-28810: ManageEngine ADSelfService Plus Authenticated Command Execution (Fixed)

![CVE-2022-28810: ManageEngine ADSelfService Plus Authenticated Command Execution (Fixed)](https://blog.rapid7.com/content/images/2022/04/managengine-vuln.jpg) On April 9, 2022, ManageEngine fixed [CV ...

30 мая, 2022

This Week in Spring – April 12th, 2022 (Devnexus 2022 Edition!!)

## This Week in Spring - Devnexus Edition Hi, Spring fans! Welcome to another installment of _This Week in Spring_ - I'm at my first in-person event since the virus: Devnexus! WOOHOOO!! Well, technica ...

30 мая, 2022

CVE-2022-24527: Microsoft Connected Cache Local Privilege Escalation (Fixed)

![CVE-2022-24527: Microsoft Connected Cache Local Privilege Escalation (Fixed)](https://blog.rapid7.com/content/images/2022/04/ms-connected-cache-vuln.jpg) On April 12, 2022, Microsoft published [CVE- ...

30 мая, 2022

A Bootiful Podcast: GraphQL Java founder Andi Marek

Hi, Spring fans! In this installment of a Bootiful Podcast, Josh Long (@starbuxman) talks to the GraphQL Java project founder and lead, Atlassian engineer, and Spring GraphQL cofounder Andi Marek (@an ...

30 мая, 2022

Improper Removal of Sensitive Information Before Storage or Transfer in irrd

IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have allowed adversaries to retrieve some of these hashes, perform a brute-for ...

30 мая, 2022