Log4j Deserialization Bypass Is Real but Not Log4Shell
A security researcher using the handle U-Sec (Wujie Security) published details of a deserialization filter bypass…
Category
Apache
Apache HTTP Server’s HTTP/2 Module Has a Memory Bug That Can Crash or Compromise Your Server
A memory management flaw buried inside Apache HTTP Server’s HTTP/2 module is giving attackers two options:…
Your TLS Certificates Are About to Silently Break — And You Won’t Know Until It’s Too Late
A quiet but consequential change is coming to internet security infrastructure — and unlike most breaking…
Apache Tomcat’s Security Fix Opened the Door to Unauthenticated RCE
Sometimes the cure is worse than the disease. That is precisely what happened when Apache’s developers…
Apache Tomcat Releases Security Updates for DoS and Bypass Vulnerabilities
The Apache Software Foundation has released important security updates addressing two vulnerabilities in Apache Tomcat, the…
Apache Camel Vulnerability CVE-2025-27636 Less Severe Than Initially Reported
A recently disclosed vulnerability in Apache Camel (CVE-2025-27636) has been officially classified as moderate severity, despite…
Critical Apache Tomcat Vulnerability Discovered: Immediate Patching Required
A serious security vulnerability has been identified in Apache Tomcat, potentially exposing servers to remote code…
Apache Patches Critical Remote Code Execution Vulnerability in Tomcat
The Apache Software Foundation has issued an urgent security advisory regarding a critical remote code execution…
New Critical RCE Vulnerability Discovered in Apache Struts 2 – Update Now
Apache has disclosed a critical remote code execution (RCE) vulnerability, tracked as CVE-2023-50164, affecting multiple versions…