CVE-2019-3797: Improper Neutralization of Special Elements used in an SQL Command

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...

The Reddit Fail Snoo

If you’ve used the bookmarking site Reddit, you’ve no doubt noted the cute little alien that is the company’s mascot. According to our research, the alien is actually called the Reddit “Snoo,” though it’s unclear whether anyone at Reddit refers to it by that name. Given the creature’s resemblance...