Posts tagged “enterprise”

3 posts

18 Jun 2025

Citrix Bleed 2 (CVE-2025-5777): memory overread on NetScaler gateways

CVE-2025-5777, dubbed Citrix Bleed 2, leaks session memory from NetScaler gateways. Who is exposed and the hardening checklist.

securitycvecitrixenterprise

14 May 2025

Ivanti EPMM RCE (CVE-2025-4428): one request, remote code on your MDM

CVE-2025-4428 gave unauthenticated RCE on Ivanti Endpoint Manager Mobile. Patch chain, device-fleet risk, and what to check now.

securitycveivantienterprise

25 Apr 2025

SAP NetWeaver RCE (CVE-2025-31324): unauthenticated upload to code execution

CVE-2025-31324 let unauthenticated attackers upload executables to SAP NetWeaver and get RCE. Why it was mass-exploited within days.

securitycvesapenterprise

Browse by topic:

2fa accessibility admin adobe-commerce alpine analytics api architecture audit b2b best-practices blueprints bots cache caching catalog checkout ci cicd citrix cli compliance configuration consent content core-web-vitals crawl crushftp csp customization cve database debugging dependencies deploy deployment deserialization detection devops di docker eav ecommerce enterprise erp events file-transfer fortinet fpc frameworks fraud frontend gdpr gitlab go govard graphql hardening headless hyva i18n images indexer integration internals inventory ivanti java javascript laravel layered-navigation layout lcp local-dev magento2 migration modules monitoring msi multistore network nextjs nodejs observability onboarding opensearch orders patch payments performance php plugins pricing profiling pwa quality rce react redis remotes resilience roundcube sap search security seo sessions shipping slo structured-data symfony sync tailwind team testing tomcat upgrade varnish wcag wordpress workflow xdebug zeroday