A security vulnerability has been identified in IBM Langflow, a low-code application building tool that some users host on our platforms. The flaw is a code injection issue, which allows outside actors to run unauthorized, harmful code on the server where Langflow is installed.This vulnerability is especially serious because attackers do not need ...
Continue reading
A security vulnerability has been identified in Apache Tomcat, a popular software platform used to host and run many websites and web applications.
The issue is caused by insufficient encryption of sensitive data processed by the software, which can let bad actors bypass a key built-in security feature called the EncryptInterceptor. This flaw can ...
Continue reading
A security vulnerability has been identified in N-able N-central. The flaw is an authentication bypass, meaning attackers can access the platform without entering a valid username and password, by using an alternate, unlisted access path or channel associated with the tool.If you use N-able N-central to manage the website or server you host with ...
Continue reading
A security vulnerability has been identified in JetBrains TeamCity, a tool commonly used by development teams to manage code builds and software release workflows. The flaw is caused by the tool improperly handling untrusted, unvalidated data when processing specific types of requests.Attackers can exploit this issue to run harmful, unauthorized ...
Continue reading
