Although Apache Tomcat’s security has improved significantly over the years, this does not mean that it cannot be improved. Apache Tomcat is a free open source Java application server thatRead More →
This week, the Apache Software Foundation issued a new set of patches to address remote code execution (RCE) flaws in Log4j, which could be exploited by threat actors to compromiseRead More →
The developers of Apache Storm, an open-source real time data analysis platform, announced the correction of two vulnerabilities whose exploitation would allow remote code execution (RCE) attacks to be deployed.Read More →
Apache HTTP Server Project developers announced the release of an update to address a recently discovered zero-day vulnerability after releasing an incomplete update. Tracked as CVE-2021-41773, the flaw can beRead More →
Cybersecurity specialists report the detection of an HTTP request smuggling vulnerability in Apache Tomcat that has been around for at least 5 years. As some may recall, Apache Tomcat isRead More →
Apache Software Foundation developers reported the release of a patch for CVE-2021-26295, a vulnerability whose successful exploitation could allow unauthenticated threat actors to take full control of the ERP systemRead More →