Nadav Markus

Nowadays, more and more Java vulnerabilities are being discovered. Exploiting these vulnerabilities can devastate a server, often resulting in remote code execution (RCE) and data leaks. And, since most Java vulnerabilities are …

Attackers are actively exploiting CVE-2021-26084 Atlassian Confluence vulnerabilities in the wild. Read this blog to view the exact exploit attempts that were detected and blocked by Cortex XDR and learn how many government and educational institutions are exposed to this attack.

Introduction On February 16, 2016 Google described a critical vulnerability in GLIBC’s getaddrinfo function. They provided a crash PoC, and so the task of producing a reliable exploit began. In this post, …

In this post we discuss CVE-2014-7911 and the various techniques that can be used to achieve privilege escalation. We also examine how some of these techniques can be blocked using several security …