Indusface Blog

February 26, 2024

Deepak Kumar Choudhary

3 min Read

Uncover critical security flaws in ConnectWise ScreenConnect (CVE-2024-1709 & CVE-2024-1708) posing remote code execution risks. Actively exploited in the wild.

February 13, 2024

Phani Deepak Akella

8 min Read

XML External Entity (XXE) is a vulnerability where attackers exploit XML parsers to access sensitive files, trigger DoS, or run remote code via malicious input

February 5, 2024

Venkatesh Sundar

7 min Read

Zero-day vulnerabilities refer to unpatched flaws exploited by attackers before fixes, posing significant security risks to both software and hardware.

February 2, 2024

Arvind Sastry

3 min Read

Explore SwyftComply: AppTrana WAAP’s autonomous patch feature ensuring zero vulnerability reports to meet compliance with SOC 2, PCI, and more, all in 72 hours.

January 25, 2024

Vinugayathri Chinnasamy

8 min Read

A SYN flood is a type of DDoS attack where the attacker overwhelms a server with excessive SYN requests, causing resource exhaustion and service disruption.

January 22, 2024

Anish Srinivasrao Kancharla

2 min Read

Secure your Indusface WAS vulnerability scan with our guide to URL verification. Confirm ownership and prevent unauthorized access in 3 simple methods

January 17, 2024

Venkatesh Sundar

6 min Read

vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks

January 17, 2024

Gaurav Chauhan

9 min Read

By identifying & cataloging in-use APIs, API discovery enables organizations to assess security risks associated with each API upon inventory creation.

January 16, 2024

Meerjada Altamas

4 min Read

The Apache OfBiz ERP system is found to have a zero day flaw (CVE-2023-51467) that may lead to unauthorized access. Explore the impact & patch details.

January 12, 2024

Venkatesh Sundar

7 min Read

Vulnerability testing systematically identifies and evaluates weaknesses in digital systems, enabling proactive cybersecurity measures and threat mitigation.

January 5, 2024

Vinugayathri Chinnasamy

6 min Read

The volume, size, sophistication, and impact of website security threats are fast increasing, making their prevention imperative. Read more.

December 21, 2023

Mohammed Ansari

2 min Read

The latest vulnerability CVE-2023-50164 disclosed on Apache Struts affects the Struts 2 framework’s file upload logic, allowing unauthorized path traversal.