WebSocket - API Security Blog

Malvertisers zoom in on cryptocurrencies and initial access

During the past month, we have observed an increase in the number of malicious ads on Google searches for "Zoom", the popular piece of video conferencing software. Threat actors have ...

14 декабря, 2023

Exploit for Improper Handling of Exceptional Conditions in Eclipse Jetty

Eclipse Jetty Canonical Repository =============================...Read More ...

14 декабря, 2023

CVE-2023-6394

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentic ...

14 декабря, 2023

CVE-2023-48230

Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression enabled, a buffer underrun can be ca ...

14 декабря, 2023

Exploit for Uncontrolled Resource Consumption in Eclipse Jetty

Eclipse Jetty Canonical Repository =============================...Read More ...

14 декабря, 2023

Exploit for CVE-2021-28169

Eclipse Jetty Canonical Repository =============================...Read More ...

14 декабря, 2023

CVE-2023-6394

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentic ...

14 декабря, 2023

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Eclipse Jetty

Eclipse Jetty Canonical Repository =============================...Read More ...

14 декабря, 2023