CVE-2022-24112-POC

CVE-2022-24112-POC Apache APISIX 2.12.1 Ejecución remota de código mediante evasión de restricción de IP y uso del token AIP de administrador predeterminado Guía completa https://kavigihan.medium.com/apache-apisix-2-12-1-remote-code-execution-5f920b22ccff...

GHSA-GP95-J463-VV28 phpMyFAQ: Default Empty API Token Authentication Bypass

Summary A default empty API client token allows any unauthenticated user to create and modify FAQ entries, categories, and questions via the REST API. The vulnerability exists in all versions since API v4.0 was introduced because the installation process seeds api.apiClientToken with an empty...