Curated security research, vulnerabilities, advisories and tools for practitioners.

#rest-api

Security coverage tagged rest-api.

1.

Unauthenticated RCE in WordPress core (wp2shell), via SQL injection

vulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | aikido.dev | original ↗ | #rce | #featured | #vulnerability-research

2.

How Two WordPress Core Bugs Chained into Pre-Auth RCE

research | 2026-07-18 00:00 | bugbunny.ai | original ↗ | #rce | #vulnerability-research | #attack-chains

3.

Web & REST API Security Explained

advisory | 2025-04-15 00:00 | aikido.dev | original ↗ | #rest-api | #api-security | #authentication

4.

Generating TypeScript Types with OpenAPI for REST API Consumption

blog | 2024-03-04 01:05 | hackerone.com | original ↗ | #rest-api | #openapi | #typescript

5.

API Scanning with Burp Suite

blog | 2021-03-11 16:08 | portswigger.net | original ↗ | #burp-suite | #attack-surface | #rest-api

6.

Hack your APIs: interview with Corey Ball - API security expert

blog | 2021-01-04 16:52 | portswigger.net | original ↗ | #rest-api | #api-security | #book

7.

Enterprise Edition: CI integration

blog | 2018-08-30 15:41 | portswigger.net | original ↗ | #rest-api | #teamcity | #ci-cd

8.

Enterprise Edition: performing scans

blog | 2018-08-27 16:10 | portswigger.net | original ↗ | #rest-api | #scanning | #burp-suite-enterprise-edition

9.

Burp Suite 2.0 beta now available

blog | 2018-08-23 13:36 | portswigger.net | original ↗ | #product-update | #rest-api | #crawler

10.

Burp's new REST API

blog | 2018-08-20 16:19 | portswigger.net | original ↗ | #burp-suite | #product-update | #rest-api