mitigation

SUBJECT: Drupal core – Highly critical – Remote Code Execution – SA-CORE-2018-002  TECH STACK: DRUPAL 7.X AND 8.X VERSIONS DATE(S) ISSUED: MARCH 28, 2018 Criticality: Critical OVERVIEW:A remote code execution […]

SUBJECT: CVE-2019-0211 Apache HTTP Server scoreboard RCE Vulnerability TECH STACK: Apache HTTP Server v. 2.4.17 to 2.4.38 DATE(S) ISSUED: 20220407 CRITICALITY: 7.8 OVERVIEW: In Apache HTTP Server 2.4 releases 2.4.17 […]

SUBJECT: CVE-2019-11043 PHP Buffer Overflow Remote Code Execution Vulnerability TECH STACK: PHP FPM v.7.3.10 and below DATE(S) ISSUED: 10/28/2019 CRITICALITY: 9.8 OVERVIEW: In PHP versions 7.1.x below 7.1.33, 7.2.x below […]

SUBJECT: CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability TECH STACK: Archive_Tar library prior to 1.4.4. DATE(S) ISSUED: 01/18/2021 CRITICALITY: HIGH OVERVIEW: CVE-2020-36193 is a vulnerability in the PEAR Archive_Tar library […]

INTRODUCTION:  Misconfigurations in MySQL databases are a common yet serious security flaw that can leave valuable data exposed to the public. This report provides detailed instructions […]

SUBJECT: CVE-2023-23752: Joomla! Improper Access Control Vulnerability – Detailed Mitigation Guide OVERVIEW: This vulnerability template details the mitigation strategies for CVE-2023-23752, a medium-severity vulnerability affecting Joomla! […]

SUBJECT: CVE-2021-39226 Grafana Authentication Bypass Vulnerability TECH STACK: Grafana versions 7.2.0 to 7.5.5  DATE(S) ISSUED: 10/05/2021 CRITICALITY: HIGH OVERVIEW: CVE-2021-39226 is an authentication bypass vulnerability that exists in Grafana, an open-source platform […]

SUBJECT: CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability TECH STACK: PEAR Archive_Tar versions 1.4.0 and earlier.  DATE(S) ISSUED: 11/19/2020 CRITICALITY: HIGH OVERVIEW: CVE-2020-28949 is a vulnerability in the PEAR […]

SUBJECT: Urgent Mitigation Required: Ivanti Connect Secure, Policy Secure, and Neurons for ZTA – Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-21893) TECH STACK:  Ivanti Connect Secure (9.x, 22.x), Ivanti […]

SUBJECT: CVE-2020-1938 Apache Tomcat AJP File Read/Include Vulnerability (Ghostcat) TECH STACK: Apache Tomcat versions 6.x, 7.x, 8.x, and 9.x DATE(S) ISSUED: 02/24/2020 CRITICALITY: HIGH OVERVIEW: CVE-2020-1938, also known as Ghostcat, […]

Securing PureFTPD is essential to safeguard data integrity and prevent unauthorized access to your system. Here’s a comprehensive approach to achieving these goals: By adopting these […]

SUBJECT: CVE-2021-42013 Apache HTTP Server 2.4.49 and 2.4.50 Path Traversal TECH STACK: Apache HTTP Server 2.4.50.   DATE(S) ISSUED: 10/07/2021 CRITICALITY: HIGH OVERVIEW: NIST Description: It was found that the fix […]