org.springframework.boot:spring-boot-starter-websocket (1.5.11.release), org.springframework.integration:spring-integration-websocket (4.3.15.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.15.release)

org.springframework:spring-websocket MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.11.release -...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.6), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.6) +6 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.0.release)

org.springframework:spring-websocket MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.6 -...

org.springframework.boot:spring-boot-starter-websocket (1.5.17.release), org.springframework.integration:spring-integration-websocket (4.3.18.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.20.release)

org.springframework:spring-websocket MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.boot:spring-boot-starter-websocket 1.5.17.release -...

cn.ymotel:dactor (>=1.0.1, <=1.0.15), org.springframework.boot:spring-boot-starter-websocket (1.5.19.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.22.release)

org.springframework:spring-websocket MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - cn.ymotel:dactor =1.0.1, =1.0.15 -...

org.ops4j.pax.web.samples:war-vaadin08-spring (>=9.0.11, <=10.1.2), org.springframework.integration:spring-integration-websocket (4.3.24.release) +1 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.30.release)

org.springframework:spring-websocket MAVEN version 4.3.30.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.ops4j.pax.web.samples:war-vaadin08-spring =9.0.11, =1.2.7, =1.3.11 Source...

org.springframework.integration:spring-integration-websocket (4.2.13.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.9.release)

org.springframework:spring-websocket MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.2.13.release...

org.springframework.integration:spring-integration-websocket (4.3.22.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.26.release)

org.springframework:spring-websocket MAVEN version 4.3.26.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.springframework.integration:spring-integration-websocket 4.3.22.release...

io.antmedia.webrtc:streamapp (>=2.2.0, <=2.4.2.1), org.springframework.integration:spring-integration-websocket (4.3.23.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.3.28.release)

org.springframework:spring-websocket MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - io.antmedia.webrtc:streamapp =2.2.0, =2.4.2.1 -...

net.apexes.wsonrpc:wsonrpc (0.5.0), org.springframework.integration:spring-integration-websocket (4.1.0.release) potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.1.2.release)

org.springframework:spring-websocket MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - net.apexes.wsonrpc:wsonrpc 0.5.0 -...

EUVD-2025-34752

An improper access control vulnerability exists in WSO2 Enterprise Integrator product due to insufficient permission restrictions on internal SOAP admin services related to system logs and user-store configuration. A low-privileged user can access log data and user-store configuration details tha...

Improving Cybercrime Detection and Digital Forensics Investigations with Artificial Intelligence

According to a recent EUROPOL report, cybercrime is still recurrent in Europe, and different activities and countermeasures must be taken to limit, prevent, detect, analyze, and fight it. Cybercrime must be prevented with specific measures, tools, and techniques, for example through automated...

Active Honeypot Guardrail System: Probing and Confirming Multi-Turn LLM Jailbreaks

Large language models LLMs are increasingly vulnerable to multi-turn jailbreak attacks, where adversaries iteratively elicit harmful behaviors that bypass single-turn safety filters. Existing defenses predominantly rely on passive rejection, which either fails against adaptive attackers or overly...

Rapid7: 7 years of recognition in Gartner® Magic Quadrant™ for SIEM

We’re proud to share that Rapid7 has been recognized in the 2025 Gartner Magic Quadrant for Security Information and Event Management SIEM. This is the seventh year we have been positioned in this report, which means we’ve been recognized in every report following the launch of our SIEM offering,...

aether

Aether - Adaptive Exploit & Threat Hunting Engine for EVM-base...

SAP NetWeaver Application Server ABAP Authorization Code Execution

The vulnerability of SAP NetWeaver Application Server ABAP and ABAP Platform integration platforms is related to incorrect authorization. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft raises the bar: A smarter way to measure AI for cybersecurity

ExCyTIn-Bench is Microsoft’s newest open-source benchmarking tool designed to evaluate how well AI systems perform real-world cybersecurity investigations.1 It helps business leaders assess language models by simulating realistic cyberthreat scenarios and providing clear, actionable insights into...

EUVD-2025-34157

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this...

CVE-2025-40773

SiPass integrated (pre-3.0) contains a broken access control vulnerability where the authorization checks are insufficient on the server side, allowing a crafted API request to manipulate data of other users. Reported across multiple feeds (including Red Hat, NVD, CIRCL, and PT Security), with CV...

CVE-2025-40772

A vulnerability has been identified in SiPass integrated All versions V3.0. Affected server applications are vulnerable to stored Cross-Site Scripting XSS, allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page. Successful exploitation...

This Week in Spring - October 14th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in Boston and New York city and Bulgaria and Poland this week, but I'm still hyped about last week's amazing Devoxx Belgium event! There are a ton of videos to look at, and I'll include just some of them here. So, without...