PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposure

bishopfox.com | vulnerability | #cloud | #zero-day | #vulnerability | #log4j | #responsible-disclosure | #waf-bypass | #imperva
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox found a WAF bypass in Imperva's Cloud WAF letting attackers evade rules with malicious POST payloads such as Log4j exploits and SQL injection; Imperva patched within days.
Published
Collected

Related coverage

Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · volexity.com
[CVE-2026-85046] Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP
# Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP October 16, 2026 Volexity Volcano Team Last month, Volexity published two blog posts in its _Mind the (Patch)...
vulnerability · volexity.com
[CVE-2026-104935] A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
# A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days October 13, 2026 Charlie Gardner, Sean Koessel, Steven Adair, and Volexity Volcano Team **_Volexity...
vulnerability · volexity.com
Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits
On September 9, 2026, Volexity published a blog post detailing the simultaneous use of multiple chained zero-day exploits in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Microsoft Windows (CVE-2026-85880) by two different Chinese advanced persistent threat (APT) actors. Shortly after that blog post was published, Volexity discovered additional campaigns—this time from a third Chinese threat actor, tracked by Volexity under the alias UTA0565—that used the same chained exploits on September 3-4, 2026, while the vulnerabilities were still unpatched. Notably, this threat actor’s campaigns differed from previously documented attacks by using multiple fake websites to deceive victims.
vulnerability · bishopfox.com
How Bishop Fox Has Been Identifying and Exploiting Log4shell
Bishop Fox's account of the first chaotic week of Log4shell (CVE-2021-44228): JNDI/LDAP payloads sprayed via HTTP headers and DNS exfiltration when outbound TCP was blocked.
vulnerability · bishopfox.com
Log4j Vulnerability: Impact Analysis
Bishop Fox experts analyze CVE-2021-44228's impact: CVSS 10 unauthenticated RCE in Apache Log4j, first mass scanning on December 10, 2021, and affected projects from Elasticsearch to Struts.
Back