Skip to content Skip to sidebar Skip to footer

Spring Modulith 0.6 Released by matthews2

I am excited to announce the 0.6 release of Spring Modulith. We have packaged a number of great new features, most notably: GH-175 – Auto-configuration for MongoDB transactions if you use the event publication registry GH-184 – The event publication registry now enables asynchronous processing and shutdown behavior. GH-190 – @EnableScenario for using the Scenario

ByHackTechMay 7, 20231Comment

News

Startups spring from ashes of Big Tech purge by throwaway81523

Mass tech layoffs spawn new wave of startupsEarly-stage VC funding at around record levelsEchoes of dotcom crash that fueled Facebook, othersJan 3 (Reuters) – Nic Szerman lost his job at Meta Platforms (META.O) in November, just two months after joining full-time, falling victim to a sweeping 13% reduction of its workforce as the advertising market

ByHackTechJanuary 3, 20230Comments

News

RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass by pentestercrab

SummaryThis writeup talks about a successful collab that I did with Dark9T (@UsmanMansha) on a private program hosted on Bugcrowd. We ended up able to bypass Akamai WAF and achieve Remote Code Execution (P1) using Spring Expression Language injection on an application running Spring Boot. This was the 2nd RCE via SSTI we found on…

ByHackTechDecember 7, 20220Comments

News

Spring Framework RCE, Early Announcement by Copenjin

I would like to acknowledge an RCE vulnerability in the Spring Framework that does not have a published CVE report yet. The issue was first reported to VMware late on Tuesday evening, close to Midnight, GMT time by codeplutos, meizjm3i of AntGroup FG. On Wednesday we worked through investigation, analysis, identifying a fix, testing, while…

ByHackTechMarch 31, 20220Comments

Sign Up to Our Newsletter