Three vulnerabilities were disclosed as Cache Poisoning Denial of Service attacks in a paper written by Hoai Viet Nguyen, Luigi Lo Iacono, and Hannes Federrath of TH Köln - University of Applied Sciences. These attacks are similar to the cache poisoning attacks presented last year at DEFCON....
September 28, 2019 10:54PM
Cloudflare’s protection against a new Remote Code Execution vulnerability (CVE-2019-16759) in vBulletin
Vulnerabilities vBulletin WAF SecurityCloudflare has released a new rule as part of its Cloudflare Specials Rulesets, to protect our customers against a high-severity vulnerability in vBulletin. A new zero-day vulnerability was discovered for vBulletin, a proprietary Internet forum software....
August 13, 2019 5:00PM
On the recent HTTP/2 DoS attacks
Vulnerabilities DDoS HTTP2Today, multiple Denial of Service (DoS) vulnerabilities were disclosed for a number of HTTP/2 server implementations. Cloudflare uses NGINX for HTTP/2. Customers using Cloudflare are already protected against these attacks....
May 28, 2019 6:45PM
Stopping SharePoint’s CVE-2019-0604
WAF Vulnerabilities SecurityOn Saturday, 11th May 2019, we got the news of a critical web vulnerability being actively exploited in the wild by advanced persistent threats (APTs), affecting Microsoft’s SharePoint server (versions 2010 through 2019)....
September 05, 2018 2:58PM
Protection from Struts Remote Code Execution Vulnerability (S2-057)
Attacks Vulnerabilities ReliabilityOn August 22 a new vulnerability in the Apache Struts framework was announced. We quickly deployed a mitigation to protect customers....
More Posts
August 20, 2018 3:53PM
How Cloudflare protects customers from cache poisoning
A few days ago, Cloudflare — along with the rest of the world — learned of a "practical" cache poisoning attack. In this post I’ll walk through the attack and explain how Cloudflare mitigated it for our customers....
-
By