窓の杜

「Apache Tomcat」「Apache Tomcat Native」に最大深刻度“CRITICAL”の脆弱性

The Apache Software Foundationは9月23日、「Apache Tomcat」と「Apache Tomcat Native」に15件の脆弱性が存在することを明らかにした。「Apache Tomcat」v9 / v10 / v11系統および「Apache Tomcat Native」v1.3 / 2.0系統に ...
cybersecuritynews

Apache Tomcat Vulnerabilities Let Attackers Bypass Security Controls and Crash Servers

The Apache Software Foundation has patched a dozen security vulnerabilities in Apache Tomcat, the widely deployed open-source Java servlet container, with fixes rolled into version 11.0.25. The flaws, ...
The Hacker News

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in ...
heise online

SAP-Patchday: Teils kritische Sicherheitslücken in mehreren Produkten gefixt

Die Apache-Camel-Komponente der SAP Integration Suite reißt mehrere Sicherheitslücken auf (CVE-2026-40453, CVE-2026-33454; bis CVSS 8.8, Risiko „hoch“). Außerdem hat der SAProuter unter Windows eine ...
techtimes

Cisco Unified CM CVE-2026-20230: Webshell Drops Confirmed, Patch Alone Won’t Evict Attackers

Cisco Unified Communications Manager deployments running with the WebDialer service enabled are under active attack today, June 24, 2026, as threat intelligence firm Defused confirmed that automated ...
Defence Blog

Saronic’s drone boat made history rescuing Apache crew off Oman

A U.S. Navy unmanned surface vessel located and recovered the aviators from a downed Army helicopter on June 8, 2026, near the coast of Oman, transporting them to a safe point on the water before they ...
CBS News

U.S. Apache helicopter shot down by Iran, Trump says; crew rescued by sea drone

Charlie D'Agata is CBS News' senior national security correspondent. He was previously a senior foreign correspondent and has spent more than two decades covering international news for CBS. An Apache ...
cyberpress

Apache Tomcat Vulnerability Enables Bypass of EncryptInterceptor Protection

Apache Tomcat has released urgent security updates after researchers found three serious vulnerabilities that could let attackers bypass encryption protections or gain unauthorized access. Because ...

IT-Sicherheit: UNIX und Windows gefährdet - Update für IT-Sicherheitshinweis zu Apache Tomcat (Risiko: mittel)

Das Bundesamt für Sicherheit in der Informationstechnik (BSI) hat am 30.11.2025 ein Update zu einer am 07.07.2025 bekanntgewordenen Sicherheitslücke für Apache Tomcat veröffentlicht. Betroffen von der ...
blog.csdn

apache-tomcat server.xml配置多个host(简洁清楚不啰嗦)

本内容遵循CC 4.0 BY-SA版权协议 假设我们要在一台机器上使用apache-tomcat服务器配置两个web应用：wejoin.top和fordoc.top。分3步： 1、将apache-tomcat下面webapps文件夹复制两份，分别命名为webapps_wejointop ...
BleepingComputer

Brute-force attacks target Apache Tomcat management panels

A coordinated campaign of brute-force attacks using hundreds of unique IP addresses targets Apache Tomcat Manager interfaces exposed online. Tomcat is a popular open-source web server widely used by ...