Polski

Posty z #SpringShell

#SpringShell

Publiczne posty w X, które używają #SpringShell.

Powiązane hashtagi

  1. DaShaun✓@dashaun
    #GraalVM native-image #SpringShell CLI to convert markdown into a bookmarks.html file. Released with #GitHubAction workflow. (spring-office-hours/mdtohtml-cli) Setup another workflow, to use the native-image CLI, to update the repo, on push to main.
    2218847
  4. Greg Foss@35Foss
    #Java #SpringShell is indeed legit and successful exploitation results in a JSP webshell (default is tomcatwar.jsp but this is trivial to change). Check your web logs for POST requests and look for new jsp filemods. #Spring4Shell
    Pobierz
    564163
  6. JFrog Security✓@JFrogSecurity
    For all our customers - the JFrog platform is not affected by #SpringShell (CVE-2022-22965) or the recent Spring Cloud Function vulnerability (CVE-2022-22963)
    035
  7. Sonatype✓@sonatype
    📢 Spring has *CONFIRMED* #SpringShell and in addition to a new release 5.3.18, also backported fix into 5.2.20. CVE pending. *Our team will be providing real time #Spring4Shell updates at ⛓
    Sonatype @sonatype
    ⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️
    004
  8. Sonatype✓@sonatype
    ⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️
    Pobierz
    11146
  10. Josh Long✓@starbuxman
    Do you maintain a folder of scripts you’ve written that you take with you from one operating system to another? What are they?
    3045.2K
  11. DaShaun✓@dashaun
    @starbuxman
    @starbuxman Yep, I keep moving things into a #SpringShell My 'conventions' for Spring workloads.
    0132.7K
  12. Sander Maas@__Retrospect
    Java keeps me up at night… pushed a quick&dirty repo to help you replicate the spring core rce that got published: #spring4shell #springshell
    32998
  14. Siva✓@sivalabs
    If you are looking for building #Java, #SpringShell, #GraalVM based CLI tools, I would recommend to take a look at: 1. ttcli 2. arconia-cli
    15222.2K
  15. Heike Ritter@HeikeRitter
    This blog is for customers looking for protection against exploitation & ways to detect vulnerable installations of the critical remote code execution vulnerability CVE-2022-22965 (referred to in the security community as #SpringShell or #Spring4Shell)
    047
  16. Wim Deblauwe@wimdeblauwe
    Build my first native executable using @springboot 3 with #springshell. Smooth experience, just had to provide hints for my resources ( and it all worked fine after that.
    3211
  17. Gerald Crescione@GeraldCrescione
    Thanks @afitnerd for reacting so quickly to this #Spring4Shell #SpringShell issue
    Snyk @snyksec
    🚨 There’s a credible #RCE vulnerability in spring-beans package, which is part of Spring Core. This is a key enabler of the inversion of control (IoC) capabilities of Spring — often referred to as dependency injection. #Spring4Shell #SpringShell (1/2) 👇
    002
  18. Snyk@snyksec
    🚨 There’s a credible #RCE vulnerability in spring-beans package, which is part of Spring Core. This is a key enabler of the inversion of control (IoC) capabilities of Spring — often referred to as dependency injection. #Spring4Shell #SpringShell (1/2) 👇
    21220
  20. Sonatype✓@sonatype
    The #Springshell exploit is already impacting millions, so we’ve put together a resource page 💡 gathering: ⚙️ The latest information on statistics 📈 ⚙️ Insights ⚙️ Useful tools & more 🧰 #Spring4Shell
    Pobierz
    139
  21. JFrog✓@jfrog
    What do you need to know about the #SpringShell vulnerability—and how can you remediate it? Don't miss today's webinar at 7am PT/10am ET/4pm CET for a detailed analysis with JFrog’s Senior Director Security Research expert Shachar Menashe. Register here:
    Pobierz
    013
  22. Sean Wright✓@SeanWrightSec
    CVE-2022-22965 (#Spring4Shell / #SpringShell), you can use OWASP Dependency Check to do a quick scan: mvn org.owasp:dependency-check-maven:aggregate This will generate a HTML report in the target folder (named dependency-check-report.html)
    2413
  23. Ax Sharma@Ax_Sharma
    👀 Re: #SpringShell that's still awaiting a CVE: Spring's documentation explicitly stresses to use "allowedFields" on DataBinder h/t @ryotkak
    Pobierz
    105
  24. Pokaż więcej postów