API - CVE CyberSecurity Database News (Page 211)

Feb 26, 2024 API API Security mintplex-labs

CVE-2024-0439 - Privilege Bypass Lets Managers Modify Restricted Settings via HTTP API

A recent vulnerability identified as CVE-2024-0439 sheds light on a common—but dangerous—mistake in web application security: hiding access controls in the frontend, but

Feb 26, 2024 API Exploit

CVE-2023-49959 - Critical Command Injection in Indo-Sol PROFINET-INspektor NT – Remote Root Exploit Demystified

--- Recently, a dangerous vulnerability (CVE-2023-49959) was uncovered in the Indo-Sol PROFINET-INspektor NT series, specifically affecting firmware versions through 2.4.. This post will break

Feb 26, 2024 Windows API Ibm Cognos Analytics

CVE-2023-30996 - IBM Cognos Analytics Information Leakage Explained + Example Exploit Code

IBM Cognos Analytics is a powerful business intelligence platform used worldwide to help organizations visualize and analyze data. However, like many complex applications, Cognos Analytics

Feb 26, 2024 API Exploit

CVE-2022-34357 - IBM Cognos Analytics Mobile Server Denial of Service Explained and Demonstrated

In mid-2022, a significant security issue surfaced affecting IBM Cognos Analytics Mobile Server versions 11.1.7, 11.2.4, and 12... Tracked as CVE-2022-34357

Feb 24, 2024 CSS Windows API Exploit sanitize-html

CVE-2024-21501 - File System Information Exposure in sanitize-html <2.12.1 – Exploit & Walkthrough

Published: June 2024 Severity: High Affected Package: sanitize-html Patched Version: 2.12.1 and above Attacker Impact: File Path & Dependency Enumeration References: - GitHub