⤷ Title: Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 13:35:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_73631 #CVE_2026_73632 #CVE_2026_73633 #CVE_2026_73634 #CVE_2026_73635 #Denial of Service #Java Web Security #JSON Plugin #Struts 2
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 13:35:05 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_73631 #CVE_2026_73632 #CVE_2026_73633 #CVE_2026_73634 #CVE_2026_73635 #Denial of Service #Java Web Security #JSON Plugin #Struts 2
Daily CyberSecurity
Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs
Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS flaws that a remote user can trigger. The other two leak data through a shared state bug in the JSON plugin…
⤷ Title: CVE-2026–40901: DataEase Root RCE via Unfiltered Quartz Deserialization
════════════════════════
𐀪 Author: Guidancewhite
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 06:57:55 GMT
════════════════════════
⌗ Tags: #sql_injection #rce #vulnerability #database #java
════════════════════════
𐀪 Author: Guidancewhite
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 06:57:55 GMT
════════════════════════
⌗ Tags: #sql_injection #rce #vulnerability #database #java
Medium
CVE-2026–40901: DataEase Root RCE via Unfiltered Quartz Deserialization
1. Overview
⤷ Title: Hack The Box:MODULE 06 — JAVA SCRIPT DEOBFUSCATION
════════════════════════
𐀪 Author: Hassan
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 17:29:42 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #javadeobfuscation #java_deofuscation
════════════════════════
𐀪 Author: Hassan
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 17:29:42 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #javadeobfuscation #java_deofuscation
Medium
Hack The Box:MODULE 06 — JAVA SCRIPT DEOBFUSCATION
From here you can access the room: https://academy.hackthebox.com/app/module/41
⤷ Title: What Closing 9 High-Severity Security Findings Taught Me About Auth, CSRF, and SSRF
════════════════════════
𐀪 Author: Md Farazul Haque
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 09:16:14 GMT
════════════════════════
⌗ Tags: #java #security #spring_boot #xss_vulnerability
════════════════════════
𐀪 Author: Md Farazul Haque
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 09:16:14 GMT
════════════════════════
⌗ Tags: #java #security #spring_boot #xss_vulnerability
Medium
What Closing 9 High-Severity Security Findings Taught Me About Auth, CSRF, and SSRF
Over the past year I worked through two internal security reviews on a production Spring Boot service, closing nine High-severity findings…
⤷ Title: I had a lot of fun writing Java client for SMB from scratch
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 16:04:18 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #java #reverse_engineering #penetration_testing
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 16:04:18 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #java #reverse_engineering #penetration_testing
Medium
I had a lot of fun writing Java client for SMB from scratch
I needed to support SMB protocol in VirtuProbe, and decided to ejnoy another RFC and code my own client library.
⤷ Title: Yapay Zekâ ile Güvenli Kod Geliştirme: Java Spring Boot, React ve PostgreSQL ile Secure SDLC
════════════════════════
𐀪 Author: Tunahan Güral
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 10:58:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_coding #application_security #java #artificial_intelligence
════════════════════════
𐀪 Author: Tunahan Güral
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 10:58:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_coding #application_security #java #artificial_intelligence
Medium
Yapay Zekâ ile Güvenli Kod Geliştirme: Java Spring Boot, React ve PostgreSQL ile Secure SDLC
Yapay zekâ destekli kod geliştirme araçları artık yazılım geliştirme süreçlerinin önemli bir parçası haline geldi. Bir REST API oluşturmak…
⤷ Title: Production Java Security as a System of Enforced Invariants
════════════════════════
𐀪 Author: Weissmann Tobi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 23:45:18 GMT
════════════════════════
⌗ Tags: #java #spring_boot #security #architecture #application_security
════════════════════════
𐀪 Author: Weissmann Tobi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 23:45:18 GMT
════════════════════════
⌗ Tags: #java #spring_boot #security #architecture #application_security
Medium
Production Java Security as a System of Enforced Invariants
A Principal Engineer Design Paper for Spring Boot, OAuth2, Multi-Tenancy, Kubernetes, Supply Chain, and Security Operations
⤷ Title: 48 Hours to Launch: The Pen Test That Stopped Our Release
════════════════════════
𐀪 Author: Pramodreddypandiri
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 01:54:38 GMT
════════════════════════
⌗ Tags: #java #devops #penetration_testing #security
════════════════════════
𐀪 Author: Pramodreddypandiri
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 01:54:38 GMT
════════════════════════
⌗ Tags: #java #devops #penetration_testing #security
Medium
48 Hours to Launch: The Pen Test That Stopped Our Release
What a last-minute security finding taught me about shipping software responsibly.
⤷ Title: Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 14:47:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_104711 #CVE_2026_104713 #CVE_2026_104714 #Denial of Service #Java security #OGNL Injection #Struts 7.4.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 14:47:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_104711 #CVE_2026_104713 #CVE_2026_104714 #Denial of Service #Java security #OGNL Injection #Struts 7.4.0
Daily CyberSecurity
Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS
TL;DR The Apache Struts team has fixed four Apache Struts vulnerabilities in Struts 7.4.0 and 6.12.0. The most serious, CVE-2026-104711, allows OGNL injection that may lead to remote code executio…
⤷ Title: Apache Jackrabbit Fixes Critical WebDAV Session Hijack Flaw CVE-2026-92414
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:08:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Jackrabbit #CVE_2026_92414 #CVE_2026_92415 #java #Session Hijacking #WebDAV
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:08:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Jackrabbit #CVE_2026_92414 #CVE_2026_92415 #java #Session Hijacking #WebDAV
Daily CyberSecurity
Apache Jackrabbit Fixes Critical WebDAV Session Hijack Flaw CVE-2026-92414
TL;DR The Apache Software Foundation has patched two Apache Jackrabbit vulnerabilities in its WebDAV components. The worst, CVE-2026-92414, scores 9.3 on CVSS 4.0 and lets an attacker hijack a cac…
⤷ Title: Dissecting Log4Shell (CVE-2021–44228): From String Interpolation to TCP Handshakes and Staged…
════════════════════════
𐀪 Author: Sharanya Avudari
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 18:56:16 GMT
════════════════════════
⌗ Tags: #docker #cybersecurity #software_engineering #application_security #java
════════════════════════
𐀪 Author: Sharanya Avudari
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 18:56:16 GMT
════════════════════════
⌗ Tags: #docker #cybersecurity #software_engineering #application_security #java
Medium
Dissecting Log4Shell (CVE-2021–44228): From String Interpolation to TCP Handshakes and Staged Enterprise Defense
Disclaimer: This analysis is for educational purposes and defensive security engineering. All testing was executed in an isolated local…