SOAP - API Security Blog

RST Threat feed. IOC: soap.sentry.cluster.bitfex.trade

Found **soap[.]sentry.cluster.bitfex.trade** in [RST Threat Fee...Read More ...

May 30, 2022

Ubuntu 20.04 LTS / 21.10 : PHP vulnerability (USN-5303-1)

The remote Ubuntu 20.04 LTS / 21.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5303-1 advisory. - In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.1 ...

May 30, 2022

PHP vulnerability

It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.Read More ...

May 30, 2022

RST Threat feed. IOC: brick-icy-soap.glitch.me

Found **brick-icy-soap[.]glitch.me** in [RST Threat Feed](https...Read More ...

May 30, 2022

ECP SAML binding bypasses authentication flows

### Description A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentic ...

May 30, 2022

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM InfoSphere Global Name Management (CVE-2016-8919)

## Summary WebSphere Application Server is shipped as a component of IBM InfoSphere Global Name Management. Information about a security vulnerability affecting WebSphere Application Server has been p ...

May 30, 2022

CVE-2022-28213

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, whi ...

May 30, 2022

fence-agents bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.Read More ...

May 30, 2022