WAF evaluation

One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild

| | API security, owasp, waf, WAF evaluation
A devastating new remote code execution (RCE) vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat servers. The exploit, ...
Wallarm
Test and evaluate your WAF before hackers

Test and evaluate your WAF before hackers

| | Application Security Testing, cloud computing, compare WAF, DEVOPS, security services, waf, WAF evaluation, WAF test, Web Application Security
Since 1991, Web Application Firewall, commonly referred to as WAF, has become one of the most common application security technologies available on the market. Since the last century, WAFs have evolved by ...
Wallarm

Best of 2022: New text2shell RCE vulnerability in Apache Common Texts CVE-2022-42889

| | API security, Cloud Security, DEVOPS, Different attack types, Researcher Corner, waf, WAF evaluation, Web Application Security
Yet another RCE with a CVSS score of 9.8 out of 10 was disclosed a few hours ago. This issue looks like the same Log4shell and it seems even more dangerous since ...
Wallarm