EUVD-2024-54900

Malicious code in bioql PyPI...

EUVD-2024-0410

Malicious code in bioql PyPI...

EUVD-2023-1303

Malicious code in bioql PyPI...

EUVD-2025-13252

Malicious code in bioql PyPI...

EUVD-2023-33516

Malicious code in bioql PyPI...

EUVD-2023-0383

Malicious code in bioql PyPI...

EUVD-2023-1651

Malicious code in bioql PyPI...

EUVD-2025-12575

Malicious code in bioql PyPI...

EUVD-2024-2526

Malicious code in bioql PyPI...

EUVD-2025-20090

Malicious code in bioql PyPI...

EUVD-2023-1989

Malicious code in bioql PyPI...

This Week in Spring: September 30th, 2025

Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 PoC Objective Reproduce, explo...

CicadasCMS 代码注入漏洞

CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developers in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter categoryName in the file...

A Bootiful Podcast: Spring Batch lead Mahmoud Ben Hassine

Hi, Spring fans! In this installment we talk to the legendary lead of the Spring Batch project, Mahmoud Ben Hassine, about the latest-and-greatest in Spring Batch in the Spring Boot 4 generation...

This Week in Spring - September 23rd, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm preparing my talks for several amazing shows including: Commit Your Code conference in Plano, Texas starting tomorrow; Dev2Next in Colorado; Devoxx Belgium in Antwerp, Belgium; and CloudFoundry Days in Germany. So much go...

CVE-2025-41249 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi, zipkin, apache-activemq-fips, camunda-zeebe, apache-activemq, apache-nifi-registry, thingsboard, conductor, apache-hop, conductor-fips, apache-hop-fips, jenkins, nacos-docker, nacos...

GHSA-JMP9-X22R-554X vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, apache-nifi, zipkin, apache-activemq-fips, camunda-zeebe, apache-activemq, apache-nifi-registry, thingsboard, conductor, apache-hop, conductor-fips, apache-hop-fips, jenkins, nacos-docker, nacos...

Linux Distros Unpatched Vulnerability : CVE-2019-9186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the...

This Week in Spring - September 9th, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am home, ensconced in my studio here in somewhat sunny San Francisco, California, relaxing and trying to catch up on stuff I missed. As always, there's a ton! So let's dive right into it. Some of the amazing features that...