APACHE FIXED CRITICAL RCE FLAW CVE-2023-50164 at STRUTS 2

The Apache Software Foundation fixed a critical file upload vulnerability in the Struts 2 open-source framework. This flaw, tracked as CVE-2023-50164, could allow remote code execution.

An attacker can manipulate file upload parameters to upload a malicious file and execute code on the server.

• Cyber Attack
• Ransomware

Ransomware Attacks Set Records in February: New Data Shows

By infosecbulletin / Sunday , March 9 2025

Ransomware attacks reached a record high in February, surpassing previous months, according to a Cyble report. The Cyble report tracked...

Read More

• Cyber Attack
• Data Breach

Cyber attack at Japanese telecom leader NTT hits 18,000 companies

By infosecbulletin / Saturday , March 8 2025

NTT Communications Corporation discovered illegal access to its facilities on February 5 and confirmed on February 6 that some information...

Read More

• Cyber Attack

Cyber heist: Pune losses Rs 6007 crore in cyber scam

By infosecbulletin / Friday , March 7 2025

India's Maharashtra Deputy Chief Minister Devendra Fadnavis disclosed alarming cyber fraud figures for Pune in 2024 during the Assembly session....

Read More

• Cyber Attack
• Data Breach

Nearly 1 million airport lost and found records leaked

By infosecbulletin / Friday , March 7 2025

Cybersecurity researcher Jeremiah Fowler found that over a dozen unprotected databases from the German firm Lost and Found Software exposed...

Read More

• Alert
• Cyber Attack

Exploiting CVE-2024-4577, Attackers Target Japan with Cobalt Strike

By infosecbulletin / Friday , March 7 2025

Cisco Talos found that an unknown attacker has been targeting organizations in Japan since January 2025. The attacker exploited the...

Read More

• International

Sleeping Beauty
Researchers Bypassed CrowdStrike Falcon Sensor partially

By infosecbulletin / Friday , March 7 2025

SEC Consult researchers found a vulnerability in CrowdStrike's Falcon Sensor, enabling attackers to evade detection and run malicious applications. The...

Read More

• Alert
• Vulnerabilities

CVE-2025-22224
41,500+ VMware ESXi Instances Vulnerable to Attacks

By infosecbulletin / Thursday , March 6 2025

As of March 4, 2025, Shadowserver found that over 41,500 internet-exposed VMware ESXi hypervisors are vulnerable to the actively exploited...

Read More

• Uncategorized

Register Now
AI Engineering Hackathon: Registration Open

By infosecbulletin / Wednesday , March 5 2025

On April 19, 2025 (Saturday), Brain Station 23 and Poridhi are jointly going to organize "AI ENGINEERING HACKATHON". The prize...

Read More

• Uncategorized

Cisco alerts about a Webex flaw that exposes credentials

By infosecbulletin / Wednesday , March 5 2025

Cisco has alerted customers about a vulnerability in Webex for BroadWorks that could allow unauthorized attackers to access credentials remotely....

Read More

• Uncategorized

NVIDIA Issues Warning of Multiple Vulnerabilities

By infosecbulletin / Wednesday , March 5 2025

NVIDIA has released urgent security advisories for multiple vulnerabilities in its Hopper HGX 8-GPU High-Performance Computing platforms. A critical flaw...

Read More

“An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.” reads the advisory published by Apache Software Foundation. Upgrade to Struts 2.5.33 or higher, as advised by the foundation.

Steven Seeley from Source Incite reported the vulnerability. Apache has not confirmed any active exploitation in attacks.

ALSO READ:

Mid-sized Canadian firms pay an average $1.13 million to ransomware gangs