Skip to content

Vulnerability Management Platform

Understanding CVE-2025-34028, Commvault’s Critical Pre-Auth RCE Vulnerability

In April 2025, a critical pre-auth Remote Code Execution vulnerability, CVE-2025-34028, was discovered in Commvault Command Center. This vulnerability allows attackers to achieve remote code execution without authentication by exploiting an Server-Side Request forgery (SSRF) and a path traversal issue that enables uploading and executing malicious ZIP files. With a CVSS score of 10.0, this… Read More »Understanding CVE-2025-34028, Commvault’s Critical Pre-Auth RCE Vulnerability

Top 10 Continuous Vulnerability Management Tools for 2025

Table of Contents Overview of Continuous Vulnerability Management Tools The Downsides of Traditional CVM Tools Why FireCompass Stands Out Top 10 Continuous Vulnerability Management Tools for 2025 1. FireCompass 2. Tenable Nessus 3. Qualys VMDR 4. Rapid7 InsightVM 5. Intruder 6. Acunetix 7. Burp Suite 8. OpenVAS 9. Tripwire IP360 10. Nmap Key Features to… Read More »Top 10 Continuous Vulnerability Management Tools for 2025

Deserialization Attacks Unleashed: How Exploiting Data Formats Can Break Your Security

In the world of cybersecurity, new vulnerabilities are discovered almost every day, but some are more insidious than others. One such vulnerability, which has quietly caused havoc in countless applications, is the threat posed by deserialization attacks. Deserialization—the process of converting a data format into a usable object—seems like an innocent operation at first glance,… Read More »Deserialization Attacks Unleashed: How Exploiting Data Formats Can Break Your Security

Critical CVEs: Fortinet, Oracle, PostgreSQL, WS_FTP Server and More

Critical CVEs: Fortinet, Oracle, PostgreSQL, WS_FTP Server and More

Critical CVEs: Fortinet, Oracle, PostgreSQL, WS_FTP Server and More This week, from February 19th to 23rd, the FireCompass research team identified a huge number of CVEs that are high in severity, along with ransomware, botnets, and threat actors creating havoc. Some of the CVEs identified are in popular commercial products used by various industries, and… Read More »Critical CVEs: Fortinet, Oracle, PostgreSQL, WS_FTP Server and More

Use Cases
Technology
About
Partner
Resources

FireCompass – An EC Council Ecosystem Company.
©2025 . All Rights Reserved.