CVSS3 - CRITICAL - API Security Blog

Exploit for Path Traversal in Secureauth Impacket

Impacket ======== [![Latest Version](https://img.shields.io/pyp...Read More ...

September 02, 2022

Introducing Qualys Threat Research Thursdays

Welcome to the first edition of the Qualys Research Teams Threat Research Thursday where we collect and curate notable new tools, techniques, procedures, threat intelligence, cybersecurity news, ...

September 01, 2022

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

## Summary Security vulnerabilities have been addressed in IBM Cognos Analytics 11.2.3. These vulnerabilities have also been previously addressed in IBM Cognos Analytics 11.1.7 FP5 where applicable. M ...

August 31, 2022

Use of Hard-coded Credentials

Hardcoded JWT Secret in AgileConfig Read More ...

August 31, 2022

Use of Hard-coded Credentials in AgileConfig.Client

Hardcoded JWT Secret in AgileConfig Read More ...

August 30, 2022

Use of Hard-coded Credentials in AgileConfig.Client

Hardcoded JWT Secret in AgileConfig Read More ...

August 30, 2022

CVE-2022-38116

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt ...

August 30, 2022

CVE-2022-34668

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial ...

August 28, 2022

Security Bulletin: Apache Log4j Vulnerability Affects IBM Sterling Transformation Extender (CVE-2021-44228)

## Summary IBM Sterling Transformation Extender is impacted by Log4j2 security vulnerability, CVE-2021-44228, where an attacker can control log messages or log message parameters can execute arbitrary ...

August 25, 2022

dotCMS Unrestricted Upload of File Vulnerability

dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage l ...

August 25, 2022