Exploiting API4 — 8 Real-World Unrestricted Resource Consumption Attack Scenarios (and How to Stop Them)

🗓️ 22 Aug 2025 11:00:00Reported by Tim ErlinType

Eight API4 DoS scenarios; Wallarm mitigations include file upload limit and session detection.

Reporter	Title	Published	Views	Family All 42
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	10 Apr 202503:27	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	25 May 202522:52	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Ivanti Connect_Secure	9 Jul 202623:05	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	9 Apr 202514:39	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	13 Jul 202510:43	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	8 Apr 202509:31	–	githubexploit
ATTACKERKB	CVE-2025-22457	3 Apr 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways’ network access control devices lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.	4 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-22457	3 Apr 202514:22	–	circl
CISA KEV Catalog	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	4 Apr 202500:00	–	cisa_kev