#apache struts

[techvandaag]

Duizenden bedrijven gebruiken nog de software die het Equifax-lek veroorzaakte

Vorig jaar september wisten hackers de gegevens van 143 miljoen Amerikanen buit te maken. Het gigantische datalek vond plaats bij de creditcardfirma Equifax, wat een goed moment had moeten zijn voor grote bedrijven om te kijken naar de manier waarop ze omgaan met klantgegevens. Dat blijkt niet helemaal zo gelopen te zijn. De kwetsbaarheid waar […] http://dlvr.it/QS8B85

[pentesttoolz]

JexBoss - JBoss (and others Java Deserialization Vulnerabilities) verify and Exploitation Tool

JexBoss - JBoss (and others Java Deserialization Vulnerabilities) verify and Exploitation Tool #vulnerabilities #JexBoss #Exploitation

JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc.

Requirements

Python >= 2.7.x

urllib3

ipaddress

Installation on Linux\Mac To install the latest version of JexBoss, please use the following commands:

git clone https://github.com/joaomatosf/jexboss.gitcd jexboss pip install -r requires.txt python…

View On WordPress

[siysl-blog]

Campaña "Zealot" utiliza exploits de NSA para Minar Monero en servidores Windows y Linux

Campaña “Zealot” utiliza exploits de NSA para Minar Monero en servidores Windows y Linux

Actualmente se está llevando a cabo una agresiva y sofisticada campaña de malware dirigida a servidores Linux y Windows con una variedad de exploits con el objetivo de instalar malware que explote la criptomoneda Monero.

La campaña fue detectada por investigadores de seguridad de F5 Networks, que la llamaron Zealot , después de zealot.zip, uno de los archivos que se incluyó en los servidores de…

View On WordPress

[lmspulse]

The EME Debacle: A Moodler’s Perspective. Open Source News Roundup

The EME Debacle: A Moodler’s Perspective. Open Source News Roundup #MoodleNews

(more…)

View On WordPress

[cybersecurity-omnium-gatherum]

Equifax blamed its recent high-profile breach on the Apache Struts Web Framework. As software delivery cycles shrink, developers have to rely on more third-party components, libraries and frameworks. When they do, what are their liabilities and responsibilities?

[monohedron]

[oddepia]

Failure to patch two-month-old bug led to massive Equifax breach

Failure to patch two-month-old bug led to massive Equifax breach

Enlarge (credit: Wikimedia Commons/Alex E. Proimos) The Equifax breach that exposed sensitive data for as many as 143 million US consumers was accomplished by exploiting a Web application vulnerability that had been patched more two months earlier, officials with the credit reporting service said Thursday. “Equifax has been intensely investigating… Read entire story.

Source: Ars Technica

View On WordPress