SOAP - API Security Blog

Amazon Linux AMI : php56 (ALAS-2023-1879)

The version of php56 installed on the remote host is prior to 5.6.40-1.144. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1879 advisory. - In PHP 8.0.X before 8.0.28, ...

December 14, 2023

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Axis vulnerability (USN-6470-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has a package installed that is affected by a vulnerability as referenced in the USN-6470-1 advisory. - ** UNSUPPPORTED W ...

December 14, 2023

Rocky Linux 8 : php:7.4 (RLSA-2022:1935)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1935 advisory. In PHP versions 7.3.x up to and including 7.3.31, 7.4 ...

December 14, 2023

Chamilo LMS <= v1.11.20 Unauthenticated Command Injection

Command injection in...Read More ...

December 14, 2023

(RHSA-2023:5926) Important: php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: XML loading external entity without being enabled (CVE-2023-3823) * php: phar Buffer mism ...

December 14, 2023

F5 Networks BIG-IP : iControl SOAP vulnerability (K53854428)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.2 / 15.1.3 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K5385442 ...

December 14, 2023

SugarCRM 13.0.1 Server-Side Template Injection

Post ContentRead More ...

December 14, 2023

Rocky Linux 8 : php:7.4 (RLSA-2022:7628)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7628 advisory. In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.2 ...

December 14, 2023