apimspray

apimspray apimspray is a specialized Entra ID Passwordspraying Toolkit designed for authorized security research and Red Teaming. It utilizes Azure API Management APIM gateways as a distributed, rotating proxy layer for IP Rotating. Read Blog Post for more Details about this project Prerequisites...

Azure-APIM-Cross-Tenant-Signup-Bypass

Azure APIM Cross-Tenant Signup Bypass Status 01.12.2025: This vulnerability is still live and exploitable. Microsoft has not patched this issue and considers it "by design." Security Advisory GHSA-vcwf-73jp-r7mv CVE-2025-66390 Summary A security vulnerability in Azure API Management APIM Develope...

Azure-APIM-Dev-Portal-Signup-Bypass

A proof-of-concept script for bypassing a disabled developer portal signup on Azure API Management APIM by directly invoking the backend registration API. What it does Azure APIM developer portals can be configured to disable self-service signup through the portal UI. In some deployments the...

Security Bulletin: Vulnerability reported in jackson-core-2.18.6.jar for APIM 11.1 is now addressed

Summary Vulnerability reported in jackson-core-2.18.6.jar for APIM 11.1 is now addressed Vulnerability Details CVEID:CVE-2026-68494 DESCRIPTION: The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is...

Security Bulletin: Vulnerabilities reported in netty-codec-4.1.135.Final.jar for APIM

Summary Vulnerabilities found in netty-codec-4.1.135.Final.jar are addressd in APIM 11.1 Vulnerability Details CVEID:CVE-2026-56745 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final...

Security Bulletin: Vulnerabilities found in jackson-databind , addressed in APIM

Summary jackson-databind is upgraded and vulnerabilities are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and...

Security Bulletin: Vulnerability found in parsson-1.0.5.jar - In IBM webMethods APIM

Summary Vulnerability found in parsson-1.0.5.jar - In IBM webMethods APIM is addressed by upgrading the jar Vulnerability Details CVEID:CVE-2026-9563 DESCRIPTION: In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the...

Azure - APIM Secret Key Detection

Azure APIM Secret Key !/usr/bin/env python3 -- coding: utf-8 -- """Azure APIM Secret Key.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Azure - APIM Secret Key Detection', 'description': 'Azure APIM Secret Key',...

CVE-2026-35425: Improper Access Control

Improper access control in Azure API Management APIM allows an authorized attacker to execute code over a network...

backend-ai-accelerator-cuda-open (>=25.6.3, <=26.8.3), backend-ai-accelerator-graphcore-ipu (>=25.19.0, <=26.4.3) +6 more potentially affected by CVE-2026-59890 via setuptools (80.0.1)

setuptools PYPI version 80.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - backend-ai-accelerator-cuda-open =25.6.3, =25.19.0, =25.6.3, =25.6.3, =25.6.3, =25.6.3, =6.0.3, =6.0.4 Source cves: CVE-2026-59890 Source...

backend-ai-accelerator-cuda-open (>=25.6.3, <=26.8.3), backend-ai-accelerator-graphcore-ipu (>=25.19.0, <=26.4.3) +6 more potentially affected by CVE-2026-59890 via setuptools (80.0.1)

setuptools PYPI version 80.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - backend-ai-accelerator-cuda-open =25.6.3, =25.19.0, =25.6.3, =25.6.3, =25.6.3, =25.6.3, =6.0.3, =6.0.4 Source cves: CVE-2026-59890 Source...

CVE-2025-8325: Improper Preservation of Permissions

The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, potentially exposing them in WSO2 APIM 3.x...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +54 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.0.5, =1.0.1, =1.0.3 and more Source cves: unknown CVE Source advisory: GHSA-VP93-GCX5-4W52...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +54 more potentially affected by unknown CVE via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.0.5, =1.0.1, =1.0.3 and more Source cves: unknown CVE Source advisory: GHSA-G336-C7WV-8HP3...

@csltech/strong-nginx-controller (>=1.0.2, <=1.0.3), @csltech/strong-pm (>=7.0.0, <=7.0.2) +54 more potentially affected by CVE-2016-1000233 via swagger-ui (>=2.0.2, <=2.1.8-M1)

swagger-ui NPM version =2.0.2, =1.0.2, =7.0.0, =3.0.1, =2.0.0, =1.0.1, =1.0.1, =5.0.232, =0.0.1, =0.4.1, =1.0.1, =0.0.1, =0.0.27, =0.0.5, =1.0.1, =1.0.3 and more Source cves: CVE-2016-1000233 Source advisory: GHSA-MRX7-8HXF-F853...