Announcements

Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

  • 7th August 2026
A security vulnerability has been discovered in Apache Tomcat, a widely used web server platform that many websites rely on to operate. This flaw involves a failure to properly encrypt sensitive data, which can allow bad actors to bypass a built-in security feature called the EncryptInterceptor that is intended to protect sensitive information ...
Continue reading

N-able N-central: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

  • 7th August 2026
A security vulnerability has been identified in N-able N-central, a remote management tool sometimes used to oversee websites, servers, and related hosting systems. The flaw is an authentication bypass, meaning it allows access to the system through an unapproved alternate path or channel without valid login credentials.If you rely on N-able ...
Continue reading

JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

  • 7th August 2026
A security vulnerability has been identified in JetBrains TeamCity, a tool many web development teams use to automate website and software deployment workflows. The flaw stems from unsafe handling of external data sent to the platform. It can be exploited through TeamCity's agent polling feature, a function that lets connected systems check for ...
Continue reading

Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability

  • 7th August 2026
A security flaw has been identified in Progress LoadMaster, a tool many websites use to balance incoming traffic across servers to keep sites running smoothly. The issue is a command injection vulnerability, which means the system does not properly check or filter input sent to multiple of its command-handling features.This vulnerability can be ...
Continue reading