• September 8, 2017
• Application Security, Research
• Nadav Avital

CVE-2017-9805: Analysis of Apache Struts RCE Vulnerability in REST Plugin

Just two months ago we published an analysis of a critical remote code execution (RCE) security vulnerability in Apache Struts. Now Apache Struts has published a new version fixing yet...

• August 24, 2017
• Application Security, Research
• Nadav Avital

Analysis of Ronggolawe Ransomware and How to Block It

In the last few years ransomware attacks have been significantly on the rise. This infamous trend began by targeting end point users’ machines, such as personal desktop and laptops. Later,...

• July 13, 2017
• Application Security, Research
• Matan Lion, Nadav Avital

CVE-2017-9791: Analysis of RCE in the Struts Showcase App in Struts 1 Plugin

On July 7th, a new security vulnerability was published in Apache Struts 2 CVE-2017-9791 (S2-048[1]). Struts 2.3.x users with Struts 1 plugin, which includes the Showcase app, are vulnerable. Once...

• March 13, 2017
• Application Security, Research
• Mia Joskowicz, Nadav Avital

CVE-2017-5638: New Remote Code Execution (RCE) Vulnerability in Apache Struts 2

On March 6th, a new remote code execution (RCE) vulnerability in Apache Struts 2 was made public. This recent vulnerability, CVE-2017-5638, allows a remote attacker to inject operating system commands...

• March 8, 2017
• Application Security, Research
• Nadav Avital, Yakov Gerstein

Early Vulnerability Disclosure Thwarts WordPress Hackers

In late January, WordPress was made aware of a new vulnerability in its code. Taking a proactive stance, the content management system (CMS) vendor immediately shared it with major web...

• January 17, 2017
• Application Security, Research
• Mia Joskowicz, Matan Lion, Nadav Avital

Defend Against PHPMailer Vulnerability with 0day Protection

On December 25th 2016, a critical new vulnerability in PHPMailer was made public. The open source PHP library for email handling embeds email functionality in web applications. This recent vulnerability...