CVE-2022-31813 : Apache HTTP Server: mod_proxy X-Forwarded-For Dropped By Hop-by-hop Mechanism
Description Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client
CVE-2022-26134 : Confluence Pre-Auth Remote Code Execution Via OGNL Injection
Description Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a
CVE-2022-29183 : Reflected XSS Possible Via Pipeline Comparisons
Description GoCD versions 20.2.0 through 21.4.0 (inclusive) are vulnerable to reflected XSS via abuse of the pipeline comparison function’s error
CVE-2022-1840 : Home Clean Services Management System Stored Cross-Site Scripting (XSS)
Description Persistent XSS (or Stored XSS) attack is one of the three major categories of XSS attacks, the others being
CVE-2022-1558 : Multiple Stored Cross-Site Scripting vulnerabilities in WordPress curtain plugin 1.0.2
Description Several Cross-Site Scripting vulnerabilities in the Curtain WordPress plugin. Due to these Cross-Site Scripting vulnerabilities, an attacker would be
CVE-2022-AVAST2 : Self-Defense Bypass via Repairing Function
Description It was noted that there is security checking to prevent some of the Avast processes from loading of undesired/unsigned
CVE-2022-21500 : Oracle Security Alert Advisory
Description This Security Alert addresses vulnerability CVE-2022-21500, which affects some deployments of Oracle E-Business Suite. This vulnerability is remotely exploitable
CVE-2022-1183 : Destroying a TLS session early causes assertion failure
Description On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those
What is Web Application and API Protection (WAAP)?
What is the Meaning of WAAP? Web applications are a centrepiece of the cloud infrastructure for many corps. A web
CVE-2022-30049 : SSRF Vulnerability
Description A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet
CVE-2022-24878 : Improper Path Handling In Kustomization Files Allows For Denial Of Service
Description The kustomize-controller enables the use of Kustomize’s functionality when applying Kubernetes declarative state onto a cluster. A malicious user
Latest Spring Vulnerabilities Exploitation – CVE-2022-22965
Are you having a Spring MVC or Spring WebFlux application running on JDK version 9 or higher? Then ensure that
Latest Spring Vulnerabilities Exploitation – CVE-2022-22965
Are you having a Spring MVC or Spring WebFlux application running on JDK version 9 or higher? Then ensure that
Securing Iot APIs Effectively
Securing IoT APIs is crucial in a world where data exchanges are becoming increasingly interconnected and vulnerable to both external
SANs Top 25
The SANS Institute designs numerous programs for the purpose of security professionals around the globe. This exceptional organization collectively brings
OWASP Top 10 API security
The OWASP Top 10 API security is a classification of the most common attacks on the web. The vulnerabilities exploited
WAF for Fintech & Financial Services
In a time of rising cyber threats, a WAF for financial services and fintech projects is essential for ensuring that
WAF for Food Industry
A WAF is an essential component of any modern data security solution for the food industry. This tool helps protect
WAF for E-Commerce
The Firewall Web Application (WAF) is an important component of your web security strategy. Unlike traditional security technologies, it is
Virtual Patching Deep Security
In today’s world of abundant information, keeping private information safe online is a challenge. Vulnerabilities can affect the reputation of
Here’s What You Must Know About IoT API Security
API Security is a vital part of securing your IoT devices. It protects data during the transmission process from one
Cloud Native WAF
The Internet has become a highway to reach the global consumer list within a few clicks. But this advancement can
Samsung Tags prior SMR Dec-2021 Release 1 Redirection information disclosure
A vulnerability classified as problematic was found in Samsung Tags. This vulnerability affects an unknown code of the component Redirection
Significance of WAF with Docker
In order to use WAF in Docker containers, you need to create a persistent volume. Then, create a folder called