Integrating API Security and WAF into K8s Kong API Gateway

> _Article by Jiju Jacob, Director of Engineering at Revenera_ [_This is an update of Mr. JacobsÂ’ 05/23 post in his _[_Medium blog_]()_. He is a Director of Engineering at Revenera. _[_Revenera_]( ...

Continue Reading
Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.3

## Summary Cross reference list for security vulnerabilites fixed in IBM WebSphere Application Server 8.5.5.3, IBM WebSphere Application Server Hypervisor 8.5.5.3 and IBM HTTP Server 8.5.5.3. ## Vuln ...

Continue Reading

CVSS2 - HIGH

Mirai Variant MooBot Botnet Exploiting D-Link Router Vulnerabilities

[![Mirai Variant MooBot Botnet](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEgjk6n4GqLeSCvA825EeY_eF7vYI55fvQ9jECCbHjI-lllr5ZYjGMM857eW8oID7BaYRz0bxDPhexKL4a6t6Hr1Yc8BaH87HdzASMiuPq-SR6Lw ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Amazon Linux 2022 : (ALAS2022-2022-073)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-073 advisory. - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML p ...

Continue Reading
Amazon Linux 2022 : (ALAS2022-2022-085)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-085 advisory. - In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter func ...

Continue Reading
AlmaLinux 8 : php:7.4 (ALSA-2022:6158)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6158 advisory. - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8. ...

Continue Reading
Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: uninitialized array in pg_query_params() leading to RCE (CVE-2022-31625) For more details ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Microsoft Exchange Server ChainedSerializationBinder RCE

This module exploits vulnerabilities within the ChainedSerializationBinder as used in Exchange Server 2019 CU10, Exchange Server 2019 CU11, Exchange Server 2016 CU21, and Exchange Server 2016 CU22 all ...

Continue Reading

Back to Main

Subscribe for the latest news: