Skip to content

Blog · page 7/7

CVE analysis, as it happens

Critical vulnerabilities and CISA KEV additions, explained: what is affected, which versions fix it, and what to check first.

  1. PHP: Critical CVEs and Securing Your Web Applications

    PHP, powering 80% of the web, concentrates critical vulnerabilities in the engine and its extensions. Analysis of major CVEs and security best practices.

    CVE-2024-4577 · 3 min

  2. Palo Alto PAN-OS: Critical CVEs and NGFW Firewall Security

    PAN-OS, the operating system powering Palo Alto firewalls, is regularly hit by critical vulnerabilities. Overview of major CVEs and security best practices.

    CVE-2024-3400 · 3 min

  3. Nginx: Critical CVEs and Web Server Security

    Nginx, the world's second most popular web server, is not without critical vulnerabilities. Analysis of major Nginx CVEs and a secure configuration guide.

    CVE-2021-23017 CVE-2022-41741 · 3 min

  4. MOVEit CVE-2023-34362: The SQL Injection That Compromised Thousands of Companies

    CVE-2023-34362 is a critical SQL injection in MOVEit Transfer exploited by the Cl0p gang. Analysis of the attack, victims and security hardening measures.

    CVE-2023-34362 · 3 min

  5. Jenkins: Critical CVEs and Securing Your CI/CD Pipeline

    Jenkins, the most widely used CI/CD tool, concentrates critical vulnerabilities enabling code execution and secrets access. Analysis of major CVEs and best practices.

    CVE-2024-23897 · 3 min

  6. Ivanti CVE-2024-21887: Auth Bypass + RCE Exploited by APT (Full Guide)

    Complete guide to Ivanti's worst 2024 CVEs (CVE-2024-21887, CVE-2023-46805, CVE-2024-21893). Detection, IOCs, patching steps and APT exploitation timeline.

    CVE-2024-21887 · 4 min

  7. Heartbleed CVE-2014-0160: The OpenSSL Vulnerability That Shook the Internet

    Heartbleed is the most famous OpenSSL vulnerability in history. Analysis of CVE-2014-0160, its impact on global HTTPS security and why it still matters today.

    CVE-2014-0160 · 4 min

  8. GitLab: Critical CVEs and Securing Your Self-Hosted Instance

    Self-hosted GitLab concentrates critical vulnerabilities including RCE and account takeovers. Analysis of major CVEs and security best practices for your instance.

    CVE-2021-22205 CVE-2023-7028 · 3 min

  9. ProxyShell CVE-2021-34473: The Exchange RCE Chain of Summer 2021

    ProxyShell is a chain of three CVEs in Microsoft Exchange enabling unauthenticated RCE. Analysis of CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 and protection.

    CVE-2021-34473 · 4 min

  10. EternalBlue and MS17-010: The Vulnerability Behind WannaCry

    MS17-010, the SMB vulnerability exploited by EternalBlue, is behind WannaCry and NotPetya. Technical analysis, global impact and protection measures.

    3 min

  11. Docker and Kubernetes: Critical CVEs and Container Security

    Docker and Kubernetes concentrate vulnerabilities enabling container escape and cluster compromise. Analysis of major CVEs and hardening your containerized infrastructure.

    CVE-2019-5736 · 4 min

  12. Citrix Bleed (CVE-2023-4966): MFA Bypass on NetScaler — Detection & Patch

    Citrix Bleed lets attackers hijack NetScaler sessions and bypass MFA. CVE-2023-4966 exploitation, IOCs, mitigation steps and patch guide for Citrix ADC/Gateway.

    CVE-2023-4966 · 4 min

  13. Atlassian Confluence: Critical CVEs and Securing Your Wiki

    Confluence concentrates critical RCE vulnerabilities that are regularly exploited. Analysis of major Atlassian Confluence CVEs and protection measures for your instance.

    CVE-2022-26134 · 3 min

  14. Apache HTTP Server: Critical CVEs and Web Server Security

    Apache HTTP Server concentrates critical vulnerabilities regularly exploited. Analysis of major CVEs including CVE-2021-41773, CVE-2021-42013 and security best practices.

    CVE-2021-41773 CVE-2021-42013 · 3 min

  15. Top 10 Critical CVEs of 2024: Vulnerabilities That Defined the Year

    A look back at the 10 most critical CVEs of 2024: RCE, privilege escalations, zero-days. What security teams need to remember.

    3 min

  16. Log4Shell (CVE-2021-44228): Anatomy of the Vulnerability That Shook the Internet

    CVE-2021-44228, CVSS score 10.0. Log4Shell remains one of the most exploited vulnerabilities in history. Full analysis, impact and lessons learned.

    CVE-2021-44228 · 3 min

  17. WordPress CVE: How to Monitor and Secure Your Site

    WordPress concentrates thousands of CVEs every year. A complete guide to identifying vulnerabilities that affect you and setting up effective security monitoring.

    3 min

  18. FortiOS and Fortinet: Major Vulnerabilities and Security Best Practices

    Fortinet appliances are ubiquitous in enterprise networks. An overview of critical FortiOS CVEs and measures to secure your infrastructure.

    3 min