JSON-RPC - API Security Blog

Blizzard Update Agent – JSON RPC DNS Rebinding

Post ContentRead More ...

June 30, 2023

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager – Invalid Access Control

Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access ControlRead More ...

June 30, 2023

CVSS3 - CRITICAL

CVSS2 - MEDIUM

Dell EMC Avamar And Integrated Data Protection Appliance Invalid Access Control

Post ContentRead More ...

June 30, 2023

Palo Alto Networks readSessionVarsFromFile() Session Corruption

This module exploits a chain of vulnerabilities in Palo Alto Networks products running PAN-OS versions prior to 6.1.19, 7.0.19, 7.1.14, and 8.0.6. This chain starts by using an authentication bypass f ...

June 30, 2023

Palo Alto Networks readSessionVarsFromFile() Session Corruption

Post ContentRead More ...

June 30, 2023

Palo Alto Networks – readSessionVarsFromFile() Session Corruption Exploit

This Metasploit module exploits a chain of vulnerabilities in Palo Alto Networks products running PAN-OS versions prior to 6.1.19, 7.0.19, 7.1.14, and 8.0.6. This chain starts by using an authenticati ...

June 30, 2023

Hackers Stole Over $20 Million in Ethereum from Insecurely Configured Clients

[![ethereum](https://thehackernews.com/images/-9Knd5dDX3hE/Wx5IfVWydPI/AAAAAAAAxBU/bR1uTuJSFes4vZcxVS8w20HbYTp7TOiGwCLcBGAs/s728-e100/ethereum.png)]() Security researchers have been warning about cybe ...

June 30, 2023

IOVLabs: Attacker can add arbitrary data to the blockchain without paying gas

**Summary:** Due to a missing sanity check in Transaction::rlpParse, an attacker can append arbitrary RLP-encoded data to the end of an otherwise valid transaction, and that data will not only pass th ...

June 30, 2023