Sign Up! | Tags | Domains | Statistics | Options | Advanced Search
|
Sign Up! | Tags | Domains | Statistics | Options | Advanced Search |
Tagged: privacy, open source, malware, hackers, passwords, phishing, anti virus, data theft, vulnerability research, exploit code, zero day attacks, responsible disclosure, pen testing, patch watch, denial of service dos, arbitrary code execution, complex attacks, locally running web servers
The United States Computer Emergency Response Team (US-CERT) has raised an alarm for a serious vulnerability in Apache Tomcat, warning that a proof-of-concept exploit is publicly available. The code, posted to Milw0rm.com, exploits a directory traversal vulnerability vulnerability in the way Apache Tomcat handles malformed requests. From the advisory: If a context is configured with … Continue Reading »