Search
Results for "Apache".
Apache HTTP Server has patched a critical vulnerability in the HTTP/2 module that could allow attackers to execute arbitrary code with server privileges, affecting versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42.
The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited.
Hackers are actively exploiting newly disclosed N-able N-central zero-day vulnerabilities, including 4EverAble2Shell, to compromise servers and deploy cryptocurrency miners.
Hackers are increasingly using GSocket, a legitimate remote access tool, to maintain persistent access to Linux servers, even after initial vulnerabilities are patched.
PHP security team has released emergency patches for two critical RCE vulnerabilities, PHP2Shell. Admins should install the latest PHP versions or apply source backports for older PHP releases.
Hackers are exploiting an OS command injection vulnerability in SiteGuard WAF, which can allow them to execute commands with admin privileges. Learn how to secure your SiteGuard WAF and prevent such attacks.
A new DoS attack, dubbed HTTP/2 Bomb, can take down web servers within seconds by exploiting default HTTP/2 configurations of major web servers. This guide explains the attack mechanism and provides practical mitigation strategies.
