JSON-RPC - API Security Blog

Quest NetVault Backup Server < 11.4.5 – Process Manager Service SQL Injection / Remote Code Execution

Post ContentRead More ...

July 01, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

Zabbix 2.2 < 3.0.3 – API JSON-RPC Remote Code Execution

Post ContentRead More ...

July 01, 2023

Zabbix SQL injection vulnerability analysis and solution-vulnerability warning-the black bar safety net

Vulnerability scope Where the use Zabbix2. 2. x, 3.0. x website in 3. 0. 4 version have repair may cause the sensitive data leakage, server by a malicious attacker to control and cause more harm. Zabb ...

July 01, 2023

OPSI Managed Client Remote Command Execution

Post ContentRead More ...

July 01, 2023

Eltek SmartPack – Backdoor Account

Post ContentRead More ...

July 01, 2023

Palo Alto Networks Firewalls – Root Remote Code Execution

Palo Alto Networks Firewalls - Root Remote Code ExecutionRead More ...

July 01, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

Palo Alto Networks PAN-OS Cookie Injection Vulnerability

Palo Alto Networks PAN-OS versions before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the managemen ...

July 01, 2023

CPP-Ethereum JSON-RPC admin_nodeInfo improper authorization Vulnerability

### Summary An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereumâs JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause ...

July 01, 2023

CVSS3 - HIGH

CVSS2 - MEDIUM