CVE-2022-47072

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...

PT-2024-11748 · Sparx Systems · Enterprise Architect

Name of the Vulnerable Software and Affected Versions: Enterprise Architect version 16.0.1605 Description: The issue allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box. This can be exploited by attackers to execute unauthorized SQL queries...

charleshefnerarchitect.com Improper Access Control vulnerability OBB-3795512

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Fix for BIRT Report Engine that is vulnerable due to nested jtidy.jar r938

Summary BIRT report engine bundled in IBM DevOps Model Architect v1.0 is vulnerable as it has a nested jtidy.jar r938. Vulnerability Details CVEID:CVE-2023-34623 DESCRIPTION: jtidy is vulnerable to a denial of service, caused by an out-of-bounds write error. By using a specially crafted object th...

A Bootiful Podcast: Java Language Architect Brian Goetz

Hi, Spring fans! Are you using Java 21 in production already? No? you should listen to this episode. Yes? Then you should listen to this episode! This week, Josh Long talks to legendary Java Language Architect Brian Goetz @BrianGoetz recaping the latest-and-greatest and previewing Java.next...

Security Bulletin: IBM Java SDK update forJava deserialization filters (JEP 290) ignored during IBM ORB deserialization

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 for Java deserialization filters JEP 290 ignored during IBM ORB deserialization that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues we...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2022 - Includes Oracle October 2022 CPU and IBM Java - OpenJ9 CVE-2022-3676

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Oct 2022 and IBM Ja...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2022and Jul 2022

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Apr 2022 and Jul 20...

Meet Prachi Shah, Senior Service Architect

Senior Service Architect Prachi Shah discusses how customer feedback plays a crucial role in product development at Akamai...

Windows shellcode stage, Reverse UDP Stager with UUID Support

Custom shellcode stage. Connect back to the attacker with UUID Support Module Options msf use payload/windows/custom/reverseudp msf payloadreverseudp show actions ...actions... msf payloadreverseudp set ACTION msf payloadreverseudp show options ...show and set options... msf payloadreverseudp run...

Sparx Systems Enterprise Architect 安全漏洞

Sparx Systems Enterprise Architect is an OMG UML-based visual modeling and design tool from Sparx Systems, Australia. A security vulnerability exists in Sparx Systems Enterprise Architect version 16.0.1605, which stems from the Find parameter of the Select Classifier dialog box that allows SQL...

Meet Tim Vereecke: Technical Solutions Architect

Tim Vereecke, technical solutions architect at Akamai, discusses how he uses a developer-first mindset to find internet performance solutions...

Malicious code in architect-http-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325828b1ad35dd8da644624797d672297f126000a01c8d1c2e75a3d4d1610e85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1081 Malicious code in architect-http-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325828b1ad35dd8da644624797d672297f126000a01c8d1c2e75a3d4d1610e85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Meet Josh Johnson: Senior Enterprise Architect

A love of technology and coding brought Josh Johnson to Akamai. Learn what he thinks a developer-first approach means for the Akamai developer community...

Security Bulletin: IBM Rational Software Architect RealTime Edition (RSA RT) is vulnerable to Apache Log4j2 - CVE-2021-44832

Summary Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. Apache...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2021and Jan 2022

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Oct 2021 and Jan 20...

charleshefnerarchitect.com Improper Access Control vulnerability OBB-2573704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Meet Anthony Hogg: Senior Enterprise Architect and Lifelong Learner

At Akamai and across the tech industry at large, best practices and tools are constantly evolving. To keep up with these changes, a passion for learning is key, especially among those who support and enable others. One Senior Enterprise Architect on Akamai’s Advanced Solutions team, Anthony Hogg,...

Security Architect Guide – Job Description and How to Become

Introduction In the steadily changing field of online protection, companies need thoroughly prepared staff to assist them with staying aware of their developing security needs. Associations that neglect to focus on these web security wind up paying the consequences for it. Things being what they...