Weekly web attack trends Weekly web attack trends allow you to see when web attacks are most prevalent. This can help you plan ahead to prevent and respond to web attacks during peak periods. The graph below shows the web attacks detected by AIWAF as Read more about [2024.07] Web Attack Trend Report[…]
Vulnerability report written by the TA team by analyzing “Atlassian Confluence Remote Code Execution (CVE-2024-21683)” Atlassian Confluence Remote Code Execution The vulnerability is an RCE vulnerability in Confluence Data Center and Server that allows users with “Confusion Administrator” privileges to upload malicious JS files through the “Add New Language” feature in General Configuration – Configuration Read more about [2024.08 Vulnerability Report] Atlassian Confluence Remote Code Execution (CVE-2024-21683)[…]
Vulnerability report written by the TA team by analyzing “Jenkins Arbitrary File Leak Vulnerability (CVE-2024-23897)” This vulnerability, identified in Jenkins’ built-in command line interface (CLI) and its interaction with the args4j library, allows attackers to exploit the ability to substitute the file contents for the “@” character after a file path in command arguments. Unfortunately, Read more about [2024.07 Vulnerability Report] Jenkins Arbitrary File Leak Vulnerability (CVE-2024-23897)[…]
Vulnerability report written by the TA team by analyzing “Adobe Commerce & Magento XML External Entity(XXE) Injection” Adobe Commerce & Magento XML External Entity(XXE) Injection The vulnerability is an XML External Entities (XXE) Injection vulnerability from Adobe Commerce’s Magento, which allows you to insert malicious XML data into a vulnerable class through REST API to Read more about [2024.07 Vulnerability Report] Adobe Commerce & Magento XML External Entity(XXE) Injection[…]
Weekly web attack trends Weekly web attack trends allow you to see when web attacks are most prevalent. This can help you plan ahead to prevent and respond to web attacks during peak periods. The graph below shows the web attacks detected by AIWAF Read more about [2024.06] Web Attack Trend Report[…]
Vulnerability report written by the TA team by analyzing “MOVEit Transfer SQL Injection(CVE-2023-34362)” This vulnerability is an attack exploited by the CL0P ransomware group, causing significant damage. Malicious users took advantage of the vulnerability to leak data and request money for stolen files. This vulnerability could allow an unauthenticated attacker to access and manipulate a Read more about [2024.06 Vulnerability Report] MOVEit Transfer SQL Injection(CVE-2023-34362)[…]
Weekly web attack trends Weekly web attack trends help you see when web attacks are most prevalent. This can help you plan ahead to prevent and respond to web attacks during peak periods. The graph below shows the web attacks detected by AIWAF in May 2024. You can see that in Read more about [2024.05] Web Attack Trend Report[…]
Vulnerability report written by the TA team by analyzin “PHP-CGI Argument Injection” The vulnerability is an Argument Injection vulnerability in PHP-CGI running on Windows that bypasses the Escape process by changing the hyphen (-) character used in the Argument Invention attack to a soft hyphen (0xAD) character using the “Best-Fit Mapping” feature of the Win32 Read more about [2024.06 Vulnerability Report] PHP-CGI Argument Injection[…]
Vulnerability report written by the TA team by analyzin “XZ Utils Backdoor” The XZ Utils backdoor is a backdoor that attackers have been preparing since 2001. It was discovered that a malicious user inserted malicious code into the open source XZ repository and distributed it without proper verification. The vulnerability was initially reported Read more about [2024.06 Vulnerability Report] XZ Utils Backdoor[…]
Vulnerability report written by the TA team by analyzing “Malicious AI Tools: HackerGPT” HackerGPT is an ethical hacking AI model with an extensive database of hacking techniques, tools, and strategies for web applications and networks to provide comprehensive support and answer hacking-related questions, and unlike other GPTs, it is a hacking-only GPT that Read more about [2024.05 Vulnerability Report] Malicious AI Tools : HackerGPT[…]
