Apache Flink has vulnerabilities CVE-2020-17518 and CVE-2020-17519, allowing arbitrary file writing and reading via REST interface, and unauthorized Jar package uploads.
A client was hit by LockBit 2.0 ransomware due to a vulnerability in Serv-U 15.0.0.0. The exploit allows remote command execution, gaining SYSTEM…
Apache Log4j 2, a Java logging framework, has a JNDI injection vulnerability in versions 2.0 to 2.14.1, allowing remote code execution.
The Yonyou NC vulnerability allows attackers to execute arbitrary code and gain server privileges via an exposed BeanShell interface and directory traversal.
While modifying the sshd configuration file, I discovered X11-forwarding, which allows running GUI programs on a remote Linux server. This changed my misconception…
Sunlogin Remote Control Software has a remote command execution vulnerability in older versions, allowing attackers to execute arbitrary commands.
The ext2 file system can be debugged using the powerful Linux tool debugfs, which facilitates regular data recovery without third-party software.
Add LogParser to environment variables before using it with PowerShell. LogParser can’t directly read certain log files and has limitations on 64-bit systems.
Spring Cloud Function has a security flaw that allows SpEL injection via HTTP headers, enabling arbitrary code execution. Upgrade to 3.1.7 or 3.2.3+….
Spring Cloud Gateway versions 3.1.0 and 3.0.6 and earlier have a SpEL injection vulnerability. Upgrade to 3.1.1 or 3.0.7+ and disable the actuator…