JSON-RPC - API Security Blog

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager – Invalid Access Control

Post ContentRead More ...

June 30, 2023

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Quest NetVault Backup NVBUBackup Count Method SQL Injection (CVE-2017-17652)

An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoki ...

June 30, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

Quest NetVault Backup NVBUEventHistory Get Method SQL Injection (CVE-2017-17412)

An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoki ...

June 30, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

Palo Alto Networks – 'readSessionVarsFromFile()' Session Corruption (Metasploit)

Post ContentRead More ...

June 30, 2023

Quest DR Series Disk Backup Software 4.0.3 Code Execution

Post ContentRead More ...

June 30, 2023

Ethernet place the JSON-RPC Interface to a variety of stolen currency technique big secret-vulnerability warning-the black bar safety net

In 2010, Laszlo the use of 10,000 bitcoin to buy a $ 25 pizza is considered bitcoin in the real world in the first transaction. In 2017, the block chain technology as the digital currency's price soar ...

June 30, 2023

Opsview Monitor 5.x Command Execution Vulnerability

Exploit for multiple platform in category web applicationsRead More ...

June 30, 2023

Monero: DoS for remote nodes using Slow Loris attack

**Summary:** Using the slow loris attack it's possible to make the the daemon unresponsive to all RPC requests without at least a restart. **Description:** I used this node.js application (https://w ...

June 30, 2023