AWE

AWE: Adaptive Agents for Dynamic Web Penetration Testing Akshat Singh Jaswal · Ashish Baghel Accepted at NDSS LAST-X 2026 Abstract Modern web applications are increasingly produced through AI-assisted development and rapid no-code deployment pipelines, widening the gap between accelerating softwa...

com.almis.awe:awe-annotation (>=4.11.3, <=4.12.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.11.3, <=4.12.0) +627 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=6.2.0, <=6.2.18)

org.springframework:spring-jms MAVEN version =6.2.0, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.12.0 and more Source cves: CVE-2026-41855 Source advisory: OSV:GHSA-X863-P983-P4F7...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0.ee-20260424025040, <=12.1.0), cc.zzzyu.nacos:default-auth-plugin (3.1.1) +133 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.2.0, <=3.2.16)

org.springframework.ldap:spring-ldap-core MAVEN version =3.2.0, =1.0.0.ee-20260424025040, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.11.5 and more Source cves: CVE-2026-41720 Source advisory: GHSA-JRV5-8W28-4265...

com.addc:addc-svr-mvc (>=2.6, <=2.9), com.addc:addc-web-mvc (>=2.6, <=2.9) +93 more potentially affected by CVE-2026-22732 via org.springframework.security:spring-security-web (4.2.12.release)

org.springframework.security:spring-security-web MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - com.addc:addc-svr-mvc =2.6, =2.6, =2.6, =4.1.2, =4.1.2...

com.almis.awe:awe-annotation (>=4.10.11, <=4.11.2), com.almis.awe:awe-annotations-spring-boot-starter (>=4.10.11, <=4.11.2) +152 more potentially affected by CVE-2025-22234 via org.springframework.security:spring-security-crypto (6.3.8)

org.springframework.security:spring-security-crypto MAVEN version 6.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.almis.awe:awe-annotation =4.10.11, =4.10.11, =4.10.11...

com.almis.awe:awe-boot (>=4.0.4, <=4.0.5), com.almis.awe:awe-controller (>=4.0.3, <=4.1.1) +20 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.14.release)

org.springframework:spring-websocket MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - com.almis.awe:awe-boot =4.0.4, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3, =4.0.3,...

MAL-2025-10736 Malicious code in @zalastax/nolb-awe (npm)

The package @zalastax/nolb-awe was found to contain malicious code...

Malicious code in @zalastax/nolb-awe (npm)

The package @zalastax/nolb-awe was found to contain malicious code...

com.almis.awe:awe-annotation (>=4.6.0, <=4.7.0), com.almis.awe:awe-annotations-spring-boot-starter (>=4.6.0, <=4.7.0) +72 more potentially affected by CVE-2024-38827 via org.springframework.security:spring-security-ldap (>=5.7.0, <=5.7.13)

org.springframework.security:spring-security-ldap MAVEN version =5.7.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =1.5.1, =1.5.4 and more Source cves: CVE-2024-38827 Source advisory: MEND:CVE-2024-38827...

com.almis.awe:awe-annotation (>=4.7.1, <=4.7.7), com.almis.awe:awe-annotations-spring-boot-starter (>=4.7.1, <=4.7.7) +28 more potentially affected by CVE-2023-34042 via org.springframework.security:spring-security-config (>=6.0.4, <=6.0.6)

org.springframework.security:spring-security-config MAVEN version =6.0.4, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.1, =4.7.7 - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter 4.0.0-m1 and more Source cves:...

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware. AhnLab Security Emergency Response Center ASEC, in a new analysis, said it marks the continued abuse of the flaws to deliver a variety of payloads on...

awefoundation.nl Cross Site Scripting vulnerability OBB-2780268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (5.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (5.1.0) +152 more potentially affected by CVE-2020-5411 via org.springframework.batch:spring-batch-core (>=4.0.0.release, <=4.2.2.release)

org.springframework.batch:spring-batch-core MAVEN version =4.0.0.release, =3.0.0.release, =3.0.0.release, =4.2.0, =4.2.0, =3.0.0-alpha.1, =2020.08.001 and more Source cves: CVE-2020-5411 Source advisory: GHSA-4PH4-Q9R5-6WM6...

Microsoft Windows kernel Pool overflow flaws vulnerabilities bug:object is a combination of Spray vulnerability use-vulnerability warning-the black bar safety net

This article I will first briefly introduce a Foundation with the Windows kernel pool overflow exploit bugs, flaws, and how to use hybrid kernel object radiation the kernel pool, via a process shrouded TypeIndex order to achieve flaws in the application. 0x01 the first volume In the added complet...