JSON-RPC - API Security Blog

Vulnerability Spotlight: Multiple Vulnerabilities in the CPP and Parity Ethereum Client

Vulnerabilities discovered by Marcin Noga of Cisco Talos. #### Overview Talos is disclosing the presence of multiple vulnerabilities in the CPP and the Parity Ethereum clients. **TALOS-2017-0503 / ...

01 июля, 2023

CPP-Ethereum JSON-RPC Denial Of Service Vulnerabilities(CVE-2017-12119)

### Summary An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum's JSON-RPC. Specially crafted JSON requests can cause a unhandled exception resulting in denial of ...

01 июля, 2023

Transmission – RPC DNS Rebinding

Transmission - RPC DNS RebindingRead More ...

01 июля, 2023

Monero: Corrupt RPC responses from remote daemon nodes can lead to transaction tracing

Dear Monero security team, Weâre writing to disclose a privacy vulnerability when using monero-cli or monero-gui with an untrusted remote node. When using a remote node, the Monero client rel ...

01 июля, 2023

Zabbix Web Interface Detection

The remote web server is running the web interface for Zabbix, an open source distributed monitoring system.Read More ...

30 июня, 2023

Zenoss 3.2.1 – (Authenticated) Remote Command Execution

Zenoss 3.2.1 - (Authenticated) Remote Command ExecutionRead More ...

30 июня, 2023

JSON-RPC API functions available anonymously even though anonymous API access is disabled.

The summary says it all really. The functions listed below can be used on our confluence service even though we have Anonymous API Access disabled (check box not checked in admin control panel). This ...

30 июня, 2023

CA ARCserve D2D r15 GWT RPC Multiple Vulnerabilities

No description provided by source.Read More ...

30 июня, 2023