168 matches found
PT-2021-11165 · Red Hat · Red Hat 3Scale
Name of the Vulnerable Software and Affected Versions: Red Hat 3scale versions prior to 3scale-2.10.0-ER1 Description: A flaw was found in Red Hat 3scale’s API documentation URL, allowing access without credentials. This issue enables an attacker to view sensitive information or modify service...
Logic Flaw Vulnerability in ShowDoc
ShowDoc is an online API documentation, technical documentation tool for IT teams. ShowDoc suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
OSV - Open Source Vulnerability DB And Triage Service
OSV is a vulnerability database and triage infrastructure for open source projects aimed at helping both open source maintainers and consumers of open source. For open source maintainers, OSV's automation helps reduce the burden of triage. Each vulnerability undergoes automated bisection and impa...
Mail.ru: XSS (reflected, and then, cookie persisted) on api documentation site theme selector (old version of dokuwiki)
Reflected XSS on apidocs.ucs.ru via GET parameter bootswatch-theme...
CVE-2019-4323
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
PT-2020-10938
Name of the Vulnerable Software and Affected Versions HCL AppScan Enterprise affected versions not specified Description The HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking. This could allow an attacker to embed the contents of untrusted web pages in a frame...
CVE-2019-4323: Improper Restriction of Rendered UI Layers or Frames
"HCL AppScan Enterprise advisory API documentation is susceptible to clickjacking, which could allow an attacker to embed the contents of untrusted web pages in a frame."...
dnsFookup - DNS Rebinding Toolkit
DNS Rebinding freamwork containing: a dns server obviously web api to create new subdomains and control the dns server, view logs, stuff like that shitty react app to make it even more comfy What does it do? It lets you create dns bins like a burp collaborator but it adds a bit more features... a...
CVE-2019-20438
An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting XSS vulnerability has been identified in the inline API documentation editor page of the API Publisher...
CVE-2019-20435
An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter...
Cross site scripting
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the update API documentation feature of the API Publisher...
CVE-2019-20435: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WSO2 API Manager 2.6.0. A reflected XSS attack could be performed in the inline API documentation editor page of the API Publisher by sending an HTTP GET request with a harmful docName request parameter...
CVE-2019-20440: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the update API documentation feature of the API Publisher...
PT-2020-10449
Name of the Vulnerable Software and Affected Versions WSO2 API Manager version 2.6.0 Description A potential stored Cross-Site Scripting XSS issue has been identified in the inline API documentation editor page of the API Publisher. This could allow for malicious scripts to be stored and executed...
CVE-2019-20438: Improper Neutralization of Input During Web Page Generation
An issue was discovered in WSO2 API Manager 2.6.0. A potential stored Cross-Site Scripting XSS vulnerability has been identified in the inline API documentation editor page of the API Publisher...
PT-2020-10451
Name of the Vulnerable Software and Affected Versions WSO2 API Manager version 2.6.0 Description A potential Reflected Cross-Site Scripting XSS issue has been identified in the update API documentation feature of the API Publisher. This could potentially allow for malicious script execution...
Sojobo - A Binary Analysis Framework
Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in .NET so you don't need to install or compile any other external libraries the project is self contained. With Sojobo you can: Emulate a 32 bit PE binary...
Moderate: Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3.4
Updated ovirt-engine-api-explorer packages that fix several bugs and add various enhancements are now available. The ovirt-engine-api-explorer package provides a web application for exploring the oVirt API documentation...