Română

Postări cu #SpringShell

#SpringShell

Postări publice de pe X care folosesc #SpringShell.

Hashtaguri înrudite

  1. FullHunt@FullHunt
    FullHunt developed spring4shell, an open-source tool for discovering spring4shell and Spring Cloud RCE at scale. The new developed payloads within spring4shell-scan bypasses several WAF vendors. Blog Post: #spring4shell #infosec #springshell
    0816
  2. Checkmarx✓@Checkmarx
    Checkmarx is closely monitoring #Spring4Shell and all other Spring vulnerabilities (CVE-2022-22963, CVE-2022-22950). Checkmarx SCA customers can scan their code for those vulnerabilities and get the latest remediation solutions. #springshell
    156
  3. Siva✓@sivalabs
    If you are looking for building #Java, #SpringShell, #GraalVM based CLI tools, I would recommend to take a look at: 1. ttcli 2. arconia-cli
    15222.2K
  5. Ax Sharma@Ax_Sharma
    👀 Re: #SpringShell that's still awaiting a CVE: Spring's documentation explicitly stresses to use "allowedFields" on DataBinder h/t @ryotkak
    Descarcă
    105
  6. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    A non-intrusive way to test if SpringShell RCE impacts your setup. HTTP 400 = yes.
    Randori Attack Team @RandoriAttack
    The following non-malicious request can be used to test susceptibility to the @springframework 0day RCE. An HTTP 400 return code indicates vulnerability. $ curl host:port/path?class.module.classLoader.URLs%5B0%5D=0 #SpringShell #Spring4Shell #infosec
    102
  8. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    Descarcă
    034
  9. Sean Wright✓@SeanWrightSec
    CVE-2022-22965 (#Spring4Shell / #SpringShell), you can use OWASP Dependency Check to do a quick scan: mvn org.owasp:dependency-check-maven:aggregate This will generate a HTML report in the target folder (named dependency-check-report.html)
    2413
  10. Sonatype✓@sonatype
    🔥Did #Spring4Shell set the internet on fire again? ✋🏽Not so fast. 🆕In a special episode of "Wicked Good Development" we dissect 🔎 the zero-day RCE vulnerability in the Spring Framework dubbed Spring4Shell or #Springshell. 🎧
    Descarcă
    91465
  13. Ilkka Turunen@llkkaT
    Good morning - the situation around #springshell / #spring4shell has clarified somewhat since last night. The issue is around DataBinder, and given the ubiquotious nature of spring we continue to advice vigilance. See our latest updates here
    013
  14. Ax Sharma@Ax_Sharma
    📢 AFTER much commotion and speculation Spring has *CONFIRMED* #SpringShell and in addition to a new release 5.3.18, also backported fix into 5.2.20. CVE pending. h/t @llkkaT #Spring4Shell
    Ax Sharma @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    139
  15. DevTalles@DevTalles
    🍃🔧 ¡#SpringShell 4.0.2 disponible! Esta versión corrige problemas de alineación respecto a la v3; trae varias correcciones además de mejoras de estabilidad y rendimiento. Ya disponible en Maven Central; consulta las notas de la release para más detalles:
    0312504
  17. Snyk Japan@snykJP
    🚨 Spring Coreの一部であるspring-beansパッケージには、確度の高いRCE脆弱性があります。これは、SpringのInversion of Control (IoC) 機能を実現するための重要なものです。これはよく依存性注入と呼ばれます。 #Spring4Shell #SpringShell (1/2) 👇
    1913
  20. Sander Maas@__Retrospect
    Java keeps me up at night… pushed a quick&dirty repo to help you replicate the spring core rce that got published: #spring4shell #springshell
    32998
  21. DFN-CERT | @[email protected]@DFNCERT
    Nach Gerüchten früher am Tag gibt es jetzt (weiterhin unbestätigte) Informationen zu #SpringShell / #Spring4Shell (0Day RCE in Spring Framework). Wir gucken. src 🍿 übersetzung 🧐 YARA (WebShells) ☕️
    vx-underground @vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    158
  22. vx-underground✓@vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    293891K
  23. Snyk@snyksec
    🚨 There’s a credible #RCE vulnerability in spring-beans package, which is part of Spring Core. This is a key enabler of the inversion of control (IoC) capabilities of Spring — often referred to as dependency injection. #Spring4Shell #SpringShell (1/2) 👇
    21220
  24. DaShaun✓@dashaun
    Im not sure what version it came with, but I am certain that testing my #SpringShell projects is much easier than it was just a couple of years ago.
    013606
  25. Arată mai multe postări