WSDL - API Security Blog

Exploit for Missing Authentication for Critical Function in Sap Netweaver Application Server Java

[CVE-2020-6287] SAP NetWeaver AS JAVA (LM Configuration Wizar...Read More ...

May 30, 2022

SAP Unauthenticated WebService User Creation

This module leverages an unauthenticated web service to submit a job which will create a user with a specified role. The job involves running a wizard. After the necessary action is taken, the job is ...

May 30, 2022

U.S. Dept Of Defense: SharePoint Web Services Exposed to Anonymous Access

Summary: Any unauthenticated/anonymous users are able to access the SharePoint Web Services (.wsdl files) for the ?????????? website. Description: The SharePoint installation for this particular site ...

May 30, 2022

Kentico CMS 12.0.14 Remote Command Execution Exploit

This Metasploit module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote command execution is possible via unauthenticated XML requests to the Staging Service S ...

May 30, 2022

Kentico CMS 12.0.14 Remote Command Execution

Post ContentRead More ...

May 30, 2022

RST Threat feed. IOC: https://ctldl.azureedge.net/v1/docs/wsdl

Found **https://ctldl[.]azureedge.net/v1/docs/wsdl** in [RST Th...Read More ...

May 30, 2022

RST Threat feed. IOC: https://ctldl.azureedge.net/v1/docs/wsdl

Found **https://ctldl[.]azureedge.net/v1/docs/wsdl** in [RST T...Read More ...