SecurityLightwell Uncovers 400+ Java Library Flaws
IBM and Red Hat's Lightwell project has identified over 400 novel vulnerabilities in Java libraries, launching a clearinghouse service for customers to submit code for review.
> Search
10 results for “java”
Security
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
SecurityTelegram export flaw left old files exposed
A patched Telegram Desktop bug hid JavaScript in exported HTML, letting old export files leak or rewrite their contents when opened.
Cyber CrimeJSCeal Expands Beyond Stolen Google Sessions
A complex JavaScript-based malware that can replay stolen browser sessions to breach Google accounts keeps evolving, researchers warn.
SecuritySVG Smuggling Drives Two-Month Voicemail Phishing Wave
Emails disguised as voicemail used SVG files to hide JavaScript, bypassing native filters in thousands of orgs.
SecuritySpring Framework's 91 Flaws: A Wake-Up Call
Broadcom patches 91 Spring vulnerabilities, with one critical flaw exposing LDAP servers to attack.
SecurityCritical ArcadeDB Flaw Allows Code Execution
A severe authorization bypass in ArcadeDB allows unauthenticated users to execute arbitrary JavaScript, earning a critical 9.8 CVSS severity rating.
SecurityCritical AWS Amplify Studio Flaw Found
A critical input validation vulnerability in AWS Amplify Studio allows authenticated users to execute arbitrary JavaScript code during component rendering.
SecurityFastjson RCE Flaw Risks Java Applications
A critical vulnerability in the Alibaba Fastjson library allows unauthorized code execution in specific Spring Boot configurations.
SecurityCritical Velocity.js RCE Flaw Patched
A critical remote code execution vulnerability in Velocity.js version 2.1.6 allows attackers to bypass previous security fixes and execute arbitrary code.