English

Posts with #spring4shell

#spring4shell

Public posts on X that use #spring4shell.

Related hashtags

  1. Pentester Academy@SecurityTube
    🧵 #Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Includes technical deep dive, impact analysis, and actionable mitigation strategies.
    128969
  2. FullHunt@FullHunt
    FullHunt developed spring4shell, an open-source tool for discovering spring4shell and Spring Cloud RCE at scale. The new developed payloads within spring4shell-scan bypasses several WAF vendors. Blog Post: #spring4shell #infosec #springshell
    0816
  3. Pentester Academy@SecurityTube
    🧵 New Blog: Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Must-read for #Java devs & #AppSec teams #Spring4Shell #InfoSec
    0371.1K
  5. Sonatype✓@sonatype
    ⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️
    Download
    11146
  7. Checkmarx✓@Checkmarx
    @Checkmarx
    Update: #Spring4Shell is now CVE-2022-22965, with a HIGH CVSS score of 8.1
    215
  9. GreyNoise✓@GreyNoiseIO
    GreyNoise has not observed significant activity related to CVE-2022-22965, colloquially known as #Spring4Shell, since April 2, 2022.
    Download
    0316
  11. INE@ine
    #Spring4Shell (CVE-2022-22965) Remote Code Execution (RCE) was discovered in Spring Core running JDK version 9 (or later). We’ve created a lab to show you how to exploit the #vulnerability. Watch, then get more exploits here: #demo #java .
    Download
    21543
  12. Bert Jan Schrijver@bjschrijver
    Combined all #Spring4Shell information I've found so far in a blog post. Will keep updating the blog post while new information emerges. If you have anything relevant to share, let me know and I'll add it.
    OpenValue @OpenValue
    A new 0-day RCE vulnerability in Spring Core has been published, called "Spring4Shell". But what is it? How does it work? What types of attacks are possible and which mitigations exist? Read this blog post by @bjschrijver and @royvanrijn for answers.
    231
  13. OpenValue@OpenValue
    A new 0-day RCE vulnerability in Spring Core has been published, called "Spring4Shell". But what is it? How does it work? What types of attacks are possible and which mitigations exist? Read this blog post by @bjschrijver and @royvanrijn for answers.
    0910
  15. Checkmarx✓@Checkmarx
    Checkmarx is closely monitoring #Spring4Shell and all other Spring vulnerabilities (CVE-2022-22963, CVE-2022-22950). Checkmarx SCA customers can scan their code for those vulnerabilities and get the latest remediation solutions. #springshell
    156
  16. Ax Sharma@Ax_Sharma
    📢 AFTER much commotion and speculation Spring has *CONFIRMED* #SpringShell and in addition to a new release 5.3.18, also backported fix into 5.2.20. CVE pending. h/t @llkkaT #Spring4Shell
    Ax Sharma @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    139
  17. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    Download
    034
  18. Daniel López✓@0xDanielLopez
    First #Spring4Shell IOCs popping up Tag has been added to TweetFeed 🔗
    Download
    Germán Fernández @1ZRR4H
    🔺 En progreso: explotación masiva de #Spring4Shell (CVE-2022-22965) para instalación de backdoor en forma de #Webshell. IPs atacantes: 172.93.189.42 🇭🇰 Luego desde la misma IP realizan 1 requerimiento HTTP a la URL final de la Webshell para verificar estado. #0day #RCE
    047
  19. Germán Fernández✓@1ZRR4H
    🔺 En progreso: explotación masiva de #Spring4Shell (CVE-2022-22965) para instalación de backdoor en forma de #Webshell. IPs atacantes: 172.93.189.42 🇭🇰 Luego desde la misma IP realizan 1 requerimiento HTTP a la URL final de la Webshell para verificar estado. #0day #RCE
    Download
    12270
  21. DFN-CERT | @[email protected]@DFNCERT
    Nach Gerüchten früher am Tag gibt es jetzt (weiterhin unbestätigte) Informationen zu #SpringShell / #Spring4Shell (0Day RCE in Spring Framework). Wir gucken. src 🍿 übersetzung 🧐 YARA (WebShells) ☕️
    vx-underground @vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    158
  22. vx-underground✓@vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    293891K
  23. Sonatype✓@sonatype
    🔥Did #Spring4Shell set the internet on fire again? ✋🏽Not so fast. 🆕In a special episode of "Wicked Good Development" we dissect 🔎 the zero-day RCE vulnerability in the Spring Framework dubbed Spring4Shell or #Springshell. 🎧
    Download
    91465
  25. Show more posts