Remote Code Execution

Kubernetes Ingress-nginx Remote Code Execution Vulnerability (CVE-2025-1974)

Kubernetes Ingress-nginx Remote Code Execution Vulnerability (CVE-2025-1974)

| | Blog, CVE-2025-1974, Emergency Response, Ingress-nginx, Kubernetes, Remote Code Execution
Overview Recently, NSFOCUS CERT detected that Kubernetes issued a security announcement and fixed the Kubernetes Ingress-nginx remote code execution vulnerability (CVE-2025-1974). The Ingress controller deployed in Kubernetes Pod can be accessed through ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.
Apache Tomcat: Vulnerable versions downloaded nearly 100K times since PoC

Apache Tomcat: Vulnerable versions downloaded nearly 100K times since PoC

| | Apache Tomcat, Malware, Remote Code Execution, Security Vulnerabilities, Tomcat
A rapidly exploited vulnerability with a major blast radius A recently disclosed vulnerability in Apache Tomcat, CVE-2025-24813, is drawing significant attention due to its ease of exploitation, rapid adoption by attackers, and ...
2024 Sonatype Blog

Disposal Advisory for Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

| | Apache, Apache Tomcat, Apache Vulnerability, Blog, CVE-2025-24813, Emergency Response, Remote Code Execution
Vulnerability Overview Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813) NSFOCUS Detection Methods NSFOCUS Remote Security Assessment System (RSAS), Web Vulnerability Scanning System (WVSS) and Network Intrusion Detection System (IDS) have the ability ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.
Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

| | Apache, Apache Tomcat, Apache Vulnerability, Blog, CVE-2025-24813, Emergency Response, Remote Code Execution
Overview Recently, NSFOCUS CERT detected that Apache issued a security announcement and fixed the remote code execution vulnerability of Apache Tomcat (CVE-2025-24813). An unauthenticated attacker can execute arbitrary code to gain server ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.
Oracle WebLogic Server Remote Code Execution and Denial of Service Vulnerability (CVE-2025-21535/CVE-2025-21549)

Oracle WebLogic Server Remote Code Execution and Denial of Service Vulnerability (CVE-2025-21535/CVE-2025-21549)

| | Blog, CVE-2025-21535, CVE-2025-21549, Denial of Service, Emergency Response, Oracle Vulnerability, Oracle WebLogic Server, Remote Code Execution
Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement, in which the remote code execution and denial of service vulnerabilities of Oracle WebLogic Server have been fixed. Affected users ...
NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

0.0.0.0 Day: 18-Year-Old Browser Flaw Affects Linux and macOS

| | 0.0.0.0 Day, Browser Exploits, Browser Security, browser security flaw, browser vulnerability, Chromium-Based Browsers, Cybersecurity, Google Chrome, Linux & Open Source News, linux security, localhost API exploitation, macOS vulnerability, Mozilla, Network Security, Private Network Access, Remote Code Execution, Safari, ShadowRay exploitation campaign
Oligo Security’s research team recently uncovered a critical vulnerability dubbed the “0.0.0.0 Day” affecting Chromium, Firefox, and Safari browsers on macOS and Linux systems. This vulnerability allows malicious websites to bypass standard ...
TuxCare
snake

Vulnerabilities for AI and ML Applications are Skyrocketing

| | AI, BentoML, machine learning, ML Flow, open source, pytorch, Ray, Remote Code Execution, Triton Inference Server
In their haste to deploy LLM tools, organizations may overlook crucial security practices. The rise in threats like Remote Code Execution indicates an urgent need to improve security measures in AI development ...
Security Boulevard
ScreenConnect Authentication Bypass demo

ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708)

| | authentication bypass, Remote Code Execution, security bulletin
Uncover critical security flaws in ConnectWise ScreenConnect (CVE-2024-1709 & CVE-2024-1708) posing remote code execution risks. Actively exploited in the wild. The post ScreenConnect Authentication Bypass (CVE-2024-1709 & CVE-2024-1708) appeared first on Indusface ...
Indusface

Critical PixieFail Vulnerabilities Lead to RCE and DoS Attacks

| | buffer-overflow-attacks, Cyber Threats, Denial-of-Service (DoS), Linux & Open Source News, PixieFail UEFI flaws, PixieFail Vulnerabilities, Remote Code Execution, Remote Code Execution Vulnerabilities, security vulnerabilites, UEFI firmware, Unified Extensible Firmware Interface (UEFI)
A set of critical security vulnerabilities has been found in the TCP/IP network protocol stack of an open-source reference implementation of the Unified Extensible Firmware Interface (UEFI) specification. Named PixieFail by Quarkslab, ...
TuxCare

GitHub Vulnerability: Key Rotation Amid High-Severity Threat

| | code injection, Cybersecurity Best Practices, Cybersecurity News, Dependabot Encryption Keys, GitHub Credential Exposure, GitHub Security Measures, Privilege Escalation via Command Injection, Remote Code Execution, Remote Code Execution Vulnerabilities, vulnerability patching
In recent developments, GitHub, a Microsoft-owned subsidiary, has taken proactive measures to address a security vulnerability potentially exposing credentials within production containers. In this article, we’ll analyze the GitHub vulnerability incident, shedding ...
TuxCare
Load more