Italiano

Post con #Spring4shell

#Spring4shell

Post pubblici su X che usano #Spring4shell.

Hashtag correlati

  1. Pentester Academy@SecurityTube
    🧵 New Blog: Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Must-read for #Java devs & #AppSec teams #Spring4Shell #InfoSec
    0371.1K
  4. Pentester Academy@SecurityTube
    🧵 #Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Includes technical deep dive, impact analysis, and actionable mitigation strategies.
    128969
  5. LunaSec (@[email protected])@LunaSecIO
    We've published an analysis of the #Spring4Shell RCE to help provide better "facts" about what we know so far. There are 2 vulnerabilities and people are confusing them. Note: This post is Markdown on GitHub if you'd like to add anything (link in thread).
    3127262
  6. INE@ine
    #Spring4Shell (CVE-2022-22965) Remote Code Execution (RCE) was discovered in Spring Core running JDK version 9 (or later). We’ve created a lab to show you how to exploit the #vulnerability. Watch, then get more exploits here: #demo #java .
    Scarica
    21543
  7. AG@MuirlandOracle
    Next time someone asks: "Can you make a lab for this Java vuln?", remind me to say no 😆 That was a cursed box to build, but all's well that ends well! Will be very interested to see if/how #Spring4Shell develops over time 👀
    TryHackMe @tryhackme
    We've released a new FREE lab demonstrating the recent Spring4Shell vulnerability (CVE-2022-22965)!🐚 🔴 Understand the vulnerability 🔴 Practice exploiting it via a web-based lab Explore the critical vulnerability in the Spring Java Framework 👉
    4471
  8. TryHackMe✓@tryhackme
    We've released a new FREE lab demonstrating the recent Spring4Shell vulnerability (CVE-2022-22965)!🐚 🔴 Understand the vulnerability 🔴 Practice exploiting it via a web-based lab Explore the critical vulnerability in the Spring Java Framework 👉
    Scarica
    776307
  9. Florian Roth ⚡️✓@cyb3rops
    First YARA rules to detect the PoC code and webshells dropped by the public POC exploiting the #Spring4Shell vulnerability Signature set of THOR Lite should be updated in a minute Thx to @xyantix @testanull Next step: log file based detection
    Scarica
    1162308
  12. LetsDefend✓@LetsDefendIO
    We created #Spring4Shell SIEM alert on LetsDefend, you can investigate it as an Incident Responder right now.
    Scarica
    01247
  14. GreyNoise✓@GreyNoiseIO
    GreyNoise has not observed significant activity related to CVE-2022-22965, colloquially known as #Spring4Shell, since April 2, 2022.
    Scarica
    0316
  15. Alvaro Muñoz@pwntester
    #Spring4Shell details are now public, It is an old ClassLoader Manipulation. Actually, CVE-2022-22965 is just a bypass of the 12 years old CVE-2010-1622 (
    581205
  16. Snyk@snyksec
    🚨 There’s a credible #RCE vulnerability in spring-beans package, which is part of Spring Core. This is a key enabler of the inversion of control (IoC) capabilities of Spring — often referred to as dependency injection. #Spring4Shell #SpringShell (1/2) 👇
    21220
  18. Sonatype✓@sonatype
    ⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️
    Scarica
    11146
  19. Mohamed@withmohds
    @th3_protoCOL
    @th3_protoCOL First YARA rules to detect the PoC code and webshells dropped by the public POC exploiting the #Spring4Shell vulnerability Signature set of THOR Lite should be updated in a minute Thx to @xyantix @testanull Next step: log file based detection
    Scarica
    1819
  20. Rapid7@rapid7
    On our blog, we have a quick walk through of recent product enhancements across our application security portfolio to help customers test and secure their apps against #Spring4Shell. 🔐 Read more:
    Scarica
    116
  22. Mostra altri post