Português

Publicações com #SpringShell

#SpringShell

Publicações públicas do X que usam #SpringShell.

Hashtags relacionados

  1. Ax Sharma@Ax_Sharma
    📢 AFTER much commotion and speculation Spring has *CONFIRMED* #SpringShell and in addition to a new release 5.3.18, also backported fix into 5.2.20. CVE pending. h/t @llkkaT #Spring4Shell
    Ax Sharma @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    139
  2. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    Baixar
    034
  5. Checkmarx✓@Checkmarx
    Checkmarx is closely monitoring #Spring4Shell and all other Spring vulnerabilities (CVE-2022-22963, CVE-2022-22950). Checkmarx SCA customers can scan their code for those vulnerabilities and get the latest remediation solutions. #springshell
    156
  7. FullHunt@FullHunt
    FullHunt developed spring4shell, an open-source tool for discovering spring4shell and Spring Cloud RCE at scale. The new developed payloads within spring4shell-scan bypasses several WAF vendors. Blog Post: #spring4shell #infosec #springshell
    0816
  9. DaShaun✓@dashaun
    #GraalVM native-image #SpringShell CLI to convert markdown into a bookmarks.html file. Released with #GitHubAction workflow. (spring-office-hours/mdtohtml-cli) Setup another workflow, to use the native-image CLI, to update the repo, on push to main.
    2218847
  10. Sonatype✓@sonatype
    🔥Did #Spring4Shell set the internet on fire again? ✋🏽Not so fast. 🆕In a special episode of "Wicked Good Development" we dissect 🔎 the zero-day RCE vulnerability in the Spring Framework dubbed Spring4Shell or #Springshell. 🎧
    Baixar
    91465
  11. Siva✓@sivalabs
    If you are looking for building #Java, #SpringShell, #GraalVM based CLI tools, I would recommend to take a look at: 1. ttcli 2. arconia-cli
    15222.2K
  13. Ax Sharma@Ax_Sharma
    👀 Re: #SpringShell that's still awaiting a CVE: Spring's documentation explicitly stresses to use "allowedFields" on DataBinder h/t @ryotkak
    Baixar
    105
  14. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    A non-intrusive way to test if SpringShell RCE impacts your setup. HTTP 400 = yes.
    Randori Attack Team @RandoriAttack
    The following non-malicious request can be used to test susceptibility to the @springframework 0day RCE. An HTTP 400 return code indicates vulnerability. $ curl host:port/path?class.module.classLoader.URLs%5B0%5D=0 #SpringShell #Spring4Shell #infosec
    102
  16. GreyNoise✓@GreyNoiseIO
    GreyNoise is tracking, has tags available for, and HAS observed exploitation of 2 different "Spring" vulnerabilities in the wild, including #SpringShell. Time series / free dynamic custom block list URLs here:
    Baixar
    34889
  20. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    @llkkaT CVE assigned to SpringShell—CVE-2022-22965 h/t @hans_dam To summarize: ✅ #SpringShell RCE zero-day = CVE-2022-22965 The 2 below are **NOT** SpringShell 🙃 ℹ️ Spring Cloud Function SpEL Injection = CVE-2022-22963 ℹ️ Spring Framework SpEL DoS = CVE-2022-22950
    Baixar
    156
  21. DFN-CERT | @[email protected]@DFNCERT
    Nach Gerüchten früher am Tag gibt es jetzt (weiterhin unbestätigte) Informationen zu #SpringShell / #Spring4Shell (0Day RCE in Spring Framework). Wir gucken. src 🍿 übersetzung 🧐 YARA (WebShells) ☕️
    vx-underground @vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    158
  22. vx-underground✓@vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    293891K
  23. Sonatype✓@sonatype
    📢 Spring has *CONFIRMED* #SpringShell and in addition to a new release 5.3.18, also backported fix into 5.2.20. CVE pending. *Our team will be providing real time #Spring4Shell updates at ⛓
    Sonatype @sonatype
    ⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️
    004
  24. Sonatype✓@sonatype
    ⛔️ Early this morning we started seeing buzz about a new remote code execution flaw that affects #SpringCore. Our Field CTO @llkkaT provides all the info on #Spring4Shell: 💭 What it is 💭 Everything you need to know 💭 Where to go from here ⛓️
    Baixar
    11146
  25. Mostrar mais publicações