Recent Advisories

Severity ID Title Vendor Product Date Type
NONE IMPERVABLOG:3EB...

Google Pay, Drug Bots, and SIM Swaps: How Old Leaks and New Vulnerabilities Power Attacks_IMPERVABLOG:3EB952F01E88995D00F40E316A3C6D0F

It starts with something simple: a CAPTCHA box on your screen. You type the number you see, because of course you do. That’s what humans do online....

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:373...

Operation Eastwood: Measuring the Real Impact on NoName057(16)_IMPERVABLOG:373308E21AA21992D6E20863912ABD5A

## Introduction On July 16, 2025, Europol revealed the details of Operation Eastwood, a coordinated international strike against one of the most a...

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:DE8...

The Hidden Threat: How Sensitive Information Leakage Puts Your Business at Risk_IMPERVABLOG:DE802C7861F2D7965ED73BC6126BC4B6

### You Don't Know What You Don't Know – And That's the Problem Picture this: Your development team has built a robust e-commerce platform. Your ...

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:0E7...

Imperva API Security: Authentication Risk Report—Key Findings & Fixes_IMPERVABLOG:0E7F1418A1757865C63914F733547748

_An in-depth analysis of common JSON Web Token (JWT) mistakes, basic auth, long-lived tokens, and quick, high-impact fixes to secure your APIs_ _._...

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:7D5...

When You’re Always Under #DDoS Attack_IMPERVABLOG:7D5F14FFFCC74363824716C14D37FC90

We recently mitigated a 1.55 terabit per second (Tbps), DDoS attack for a steady customer of ours. This particular customer is a reputable domain n...

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:2BB...

Why Separating Control and Data Planes Matters in Application Security_IMPERVABLOG:2BBE616BC379232B90580FC5969B8944

Modern application environments are dynamic, distributed, and moving faster than ever. DevOps teams deploy new services daily, APIs multiply across...

N/A N/A IMPERVABLOG
CRITICAL 9.3 IMPERVABLOG:2ED...

Critical Flaws in Base44 Exposed Sensitive Data and Allowed Account Takeovers_IMPERVABLOG:2ED0CCC46B389C7D1BF4F3CCDCB72648

Our research uncovered multiple critical vulnerabilities in Base44, an AI-powered platform that lets you turn any idea into a fully functional cust...

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:5E1...

Smuggling Requests with Chunked Extensions: A New HTTP Desync Trick_IMPERVABLOG:5E131D8E57BD4CB674003030C0CA9080

A new HTTP request smuggling technique was recently discovered, where attackers take advantage of inconsistent parsing behaviors between front-end ...

N/A N/A IMPERVABLOG
MEDIUM 5.3 IMPERVABLOG:6F0...

QUIC-LEAK (CVE-2025-54939): New High-Risk Pre-Handshake Remote Denial of Service in LSQUIC QUIC Implementation_IMPERVABLOG:6F0FDC9B1E16D098F2CF20DB42B0108A

Imperva Offensive team discovered that threat actors could smuggle malformed packets to exhaust memory and crash QUIC servers even before a connect...

N/A N/A IMPERVABLOG
NONE IMPERVABLOG:787...

MadeYouReset: Turning HTTP/2 Server Against Itself_IMPERVABLOG:7875AC48CD1025E9B90B3AE4D539EBFC

## Introduction HTTP/2 was designed for performance- faster multiplexed connections, stream prioritization, and header compression. But these same...

N/A N/A IMPERVABLOG