CVSS3 - MEDIUM - API Security Blog

Request-Baskets 1.2.1 Server-Side Request Forgery

Post ContentRead More ...

August 11, 2023

Moderate Photon OS Security Update – PHSA-2023-5.0-0068

Updates of ['grpc'] packages of Photon OS have been released.Read More ...

August 11, 2023

CVE-2023-4283

The EmbedPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embedpress_calendar' shortcode in versions up to, and including, 3.8.2 due to insufficient input sanitization ...

August 10, 2023

CVE-2023-4282

The EmbedPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'admin_post_remove' and 'remove_private_data' functions in versions up to, and i ...

August 10, 2023

Request-Baskets v1.2.1 – Server-side request forgery (SSRF)

Post ContentRead More ...

August 10, 2023

Exploit for Server-Side Request Forgery in Rbaskets Request Baskets

# CVE-2023-27163 - Request Baskets SSRF Request Baskets SSRF P...Read More ...

August 10, 2023

Denial Of Service (DoS)

gitlab is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the lack of length validation of the library, which allows an attacker to create a large Issue description via GraphQL, ...

August 10, 2023

CVE-2023-37855

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt brow ...

August 09, 2023

CVE-2023-37856

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dia ...

August 09, 2023

CVE-2023-4242

The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authentic ...

August 09, 2023