Türkçe

#Spring4Shell içeren gönderiler

#Spring4Shell

X'te #Spring4Shell kullanan herkese açık gönderiler.

İlgili etiketler

  1. Snyk@snyksec
    🚨 A fixed version for CVE-2022-22965 (#Spring4Shell) has been issued. At this time, we recommend upgrading to spring-beans version 5.2.20, 5.3.18, or higher and have updated our advisory published on Mar. 30:
    İndir
    0715
  2. FullHunt@FullHunt
    FullHunt developed spring4shell, an open-source tool for discovering spring4shell and Spring Cloud RCE at scale. The new developed payloads within spring4shell-scan bypasses several WAF vendors. Blog Post: #spring4shell #infosec #springshell
    0816
  3. GreyNoise✓@GreyNoiseIO
    GreyNoise has not observed significant activity related to CVE-2022-22965, colloquially known as #Spring4Shell, since April 2, 2022.
    İndir
    0316
  4. Pentester Academy@SecurityTube
    🧵 New Blog: Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Must-read for #Java devs & #AppSec teams #Spring4Shell #InfoSec
    0371.1K
  5. Checkmarx✓@Checkmarx
    Checkmarx is closely monitoring #Spring4Shell and all other Spring vulnerabilities (CVE-2022-22963, CVE-2022-22950). Checkmarx SCA customers can scan their code for those vulnerabilities and get the latest remediation solutions. #springshell
    156
  6. LunaSec (@[email protected])@LunaSecIO
    We've published an analysis of the #Spring4Shell RCE to help provide better "facts" about what we know so far. There are 2 vulnerabilities and people are confusing them. Note: This post is Markdown on GitHub if you'd like to add anything (link in thread).
    3127262
  8. Snyk@snyksec
    ⚠️ While #Spring4Shell doesn't appear to have the same impact as #Log4Shell, it should still be evaluated and prioritized by every organization using the Spring Framework. This post explores how the #ZeroDay #RCE vulnerability works and how to mitigate.
    0615
  10. Maciej Walkowiak 🍃✓@maciejwalkowiak
    3 lessons from #Spring4Shell: 1. Keep your dependencies up to date 2. Build pipeline where you can deploy in no time 3. Make jar not war
    424167
  11. Rapid7@rapid7
    New emergent threat response: “#Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965).” Read our blog overview of what you need to know ⤵️ Note: we will continue to update this blog as more information becomes available.
    039
  13. Checkmarx✓@Checkmarx
    @Checkmarx
    Update: #Spring4Shell is now CVE-2022-22965, with a HIGH CVSS score of 8.1
    215
  14. DFN-CERT | @[email protected]@DFNCERT
    Nach Gerüchten früher am Tag gibt es jetzt (weiterhin unbestätigte) Informationen zu #SpringShell / #Spring4Shell (0Day RCE in Spring Framework). Wir gucken. src 🍿 übersetzung 🧐 YARA (WebShells) ☕️
    vx-underground @vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    158
  15. vx-underground✓@vxunderground
    A Java Springcore RCE 0day exploit has been leaked. It was leaked by a Chinese security researcher who, since sharing and/or leaking it, has deleted their Twitter account. We have not verified the exploit. tl;dr big if true Download the 0day POC here:
    293891K
  18. Pentester Academy@SecurityTube
    🧵 #Spring4Shell Vulnerability Explained Learn how a Java 9 architectural change led to a critical RCE vulnerability affecting millions of Spring applications. Includes technical deep dive, impact analysis, and actionable mitigation strategies.
    128969
  19. Ax Sharma@Ax_Sharma
    📢 AFTER much commotion and speculation Spring has *CONFIRMED* #SpringShell and in addition to a new release 5.3.18, also backported fix into 5.2.20. CVE pending. h/t @llkkaT #Spring4Shell
    Ax Sharma @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    139
  20. Ax Sharma@Ax_Sharma
    @Ax_Sharma
    🆕 Spring has a NEW 5.3.18 release today (h/t @madpah @sonatype) that just hit Maven Central. Release touches the 'CachedIntrospectionResults' class—after 2 years. The same class that's stated to be responsible for #SpringShell and older CVE-2010-1622 💥
    İndir
    034
  22. 🆁🅴🅶🅶🅸🅴@Ring0x0
    SOC: #spring4shell requires Spring MVC framework of JDK9 and above. If the JDK version is less than equal to 8, it is not affected. Client: You told us to upgrade our Java! SOC: ....
    İndir
    31430
  23. Daha fazla gönderi göster