Security Bulletin: Due to the use of Spring Expression Language (SpEL), IBM Sterling Control Center is vulnerable to Improper Control of Dynamically-Managed Code Resources (CVE-2026-59283)

Summary Spring MVC application evaluate Spring Expression Language SpEL which used by IBM Sterling Control Center as part of dependency in spring-expression-6.2.12.jar Vulnerability Details CVEID:CVE-2026-59283 DESCRIPTION: Applications that evaluate Spring Expression Language SpEL expressions...

CrushFTP Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CrushFTP Unauthenticated RCE', 'Description' = %q This exploit module leverages an Improperly Controlled Modification of Dynamically-Determined...