50 matches found
GHSA-4HHG-8GHQ-VWQ6 Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks...
Red Hat Infinispan Code Execution Vulnerability
Red Hat Infinispan is a distributed caching and key-value NoSQL data storage software from Red Hat Red Hat. A security vulnerability exists in Infinispan version 10 that stems from allowing local access to the control via REST and HotRod api. An attacker could exploit the vulnerability to perform...
Malicious Package
Overview divining-rod is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using divining-rod...
Deputy AG Rod Rosenstein Is Still Calling for an Encryption Backdoor
At a cybercrime conference Thursday, Rod Rosenstein once again decried "going dark."...
Even If Rod Rosenstein Stays, the Mueller Investigation Status Quo Won't Last
Much of the speculation around deputy attorney general Rod Rosenstein's fate misses how disruptive a post-midterms shake-up could be...
rod-dd.com XSS vulnerability
Open Bug Bounty ID: OBB-630187 Description| Value ---|--- Affected Website:| rod-dd.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...
Trump Fires FBI Director Over Clinton Probe, Amid Russia Investigation
President Donald Trump has abruptly fired James Comey, the director of the Federal Bureau of Investigation FBI who was leading an investigation into alleged links between Trump and Russia. The White House announced on Tuesday that Comey was fired on the "clear recommendation" of Deputy Attorney...
[SECURITY] Fedora 25 Update: springframework-3.2.18-1.fc25
Spring is a layered Java/J2EE application framework, based on code publishe d in Expert One-on-One J2EE Design and Development by Rod Johnson Wrox, 2002...