> Search

7 results for “java”

Cyber Crime

JSCeal Expands Beyond Stolen Google Sessions

A complex JavaScript-based malware that can replay stolen browser sessions to breach Google accounts keeps evolving, researchers warn.

1 day ago

Security

SVG Smuggling Drives Two-Month Voicemail Phishing Wave

Emails disguised as voicemail used SVG files to hide JavaScript, bypassing native filters in thousands of orgs.

1 week ago

Security

Spring Framework's 91 Flaws: A Wake-Up Call

Broadcom patches 91 Spring vulnerabilities, with one critical flaw exposing LDAP servers to attack.

2 weeks ago

Security

Critical ArcadeDB Flaw Allows Code Execution

A severe authorization bypass in ArcadeDB allows unauthenticated users to execute arbitrary JavaScript, earning a critical 9.8 CVSS severity rating.

1 month ago

Security

Critical AWS Amplify Studio Flaw Found

A critical input validation vulnerability in AWS Amplify Studio allows authenticated users to execute arbitrary JavaScript code during component rendering.

1 month ago

Security

Fastjson RCE Flaw Risks Java Applications

A critical vulnerability in the Alibaba Fastjson library allows unauthorized code execution in specific Spring Boot configurations.

1 month ago

Security

Critical Velocity.js RCE Flaw Patched

A critical remote code execution vulnerability in Velocity.js version 2.1.6 allows attackers to bypass previous security fixes and execute arbitrary code.

1 month ago