⤷ Title: Hack The Box:MODULE 06 — JAVA SCRIPT DEOBFUSCATION
════════════════════════
𐀪 Author: Hassan
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 17:29:42 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #javadeobfuscation #java_deofuscation
════════════════════════
𐀪 Author: Hassan
════════════════════════
ⴵ Time: Thu, 03 Sep 2026 17:29:42 GMT
════════════════════════
⌗ Tags: #hackthebox #hackthebox_writeup #javadeobfuscation #java_deofuscation
Medium
Hack The Box:MODULE 06 — JAVA SCRIPT DEOBFUSCATION
From here you can access the room: https://academy.hackthebox.com/app/module/41
⤷ Title: What Closing 9 High-Severity Security Findings Taught Me About Auth, CSRF, and SSRF
════════════════════════
𐀪 Author: Md Farazul Haque
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 09:16:14 GMT
════════════════════════
⌗ Tags: #java #security #spring_boot #xss_vulnerability
════════════════════════
𐀪 Author: Md Farazul Haque
════════════════════════
ⴵ Time: Sun, 13 Sep 2026 09:16:14 GMT
════════════════════════
⌗ Tags: #java #security #spring_boot #xss_vulnerability
Medium
What Closing 9 High-Severity Security Findings Taught Me About Auth, CSRF, and SSRF
Over the past year I worked through two internal security reviews on a production Spring Boot service, closing nine High-severity findings…
⤷ Title: I had a lot of fun writing Java client for SMB from scratch
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 16:04:18 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #java #reverse_engineering #penetration_testing
════════════════════════
𐀪 Author: Jakub Stonavsky
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 16:04:18 GMT
════════════════════════
⌗ Tags: #software_testing #cybersecurity #java #reverse_engineering #penetration_testing
Medium
I had a lot of fun writing Java client for SMB from scratch
I needed to support SMB protocol in VirtuProbe, and decided to ejnoy another RFC and code my own client library.
⤷ Title: Yapay Zekâ ile Güvenli Kod Geliştirme: Java Spring Boot, React ve PostgreSQL ile Secure SDLC
════════════════════════
𐀪 Author: Tunahan Güral
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 10:58:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_coding #application_security #java #artificial_intelligence
════════════════════════
𐀪 Author: Tunahan Güral
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 10:58:19 GMT
════════════════════════
⌗ Tags: #cybersecurity #secure_coding #application_security #java #artificial_intelligence
Medium
Yapay Zekâ ile Güvenli Kod Geliştirme: Java Spring Boot, React ve PostgreSQL ile Secure SDLC
Yapay zekâ destekli kod geliştirme araçları artık yazılım geliştirme süreçlerinin önemli bir parçası haline geldi. Bir REST API oluşturmak…
⤷ Title: Production Java Security as a System of Enforced Invariants
════════════════════════
𐀪 Author: Weissmann Tobi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 23:45:18 GMT
════════════════════════
⌗ Tags: #java #spring_boot #security #architecture #application_security
════════════════════════
𐀪 Author: Weissmann Tobi
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 23:45:18 GMT
════════════════════════
⌗ Tags: #java #spring_boot #security #architecture #application_security
Medium
Production Java Security as a System of Enforced Invariants
A Principal Engineer Design Paper for Spring Boot, OAuth2, Multi-Tenancy, Kubernetes, Supply Chain, and Security Operations
⤷ Title: 48 Hours to Launch: The Pen Test That Stopped Our Release
════════════════════════
𐀪 Author: Pramodreddypandiri
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 01:54:38 GMT
════════════════════════
⌗ Tags: #java #devops #penetration_testing #security
════════════════════════
𐀪 Author: Pramodreddypandiri
════════════════════════
ⴵ Time: Sun, 04 Oct 2026 01:54:38 GMT
════════════════════════
⌗ Tags: #java #devops #penetration_testing #security
Medium
48 Hours to Launch: The Pen Test That Stopped Our Release
What a last-minute security finding taught me about shipping software responsibly.
⤷ Title: Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 14:47:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_104711 #CVE_2026_104713 #CVE_2026_104714 #Denial of Service #Java security #OGNL Injection #Struts 7.4.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 05 Oct 2026 14:47:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Struts #CVE_2026_104711 #CVE_2026_104713 #CVE_2026_104714 #Denial of Service #Java security #OGNL Injection #Struts 7.4.0
Daily CyberSecurity
Apache Struts 7.4.0 Fixes Four Vulnerabilities, Including OGNL Injection and REST Plugin DoS
TL;DR The Apache Struts team has fixed four Apache Struts vulnerabilities in Struts 7.4.0 and 6.12.0. The most serious, CVE-2026-104711, allows OGNL injection that may lead to remote code executio…
⤷ Title: Apache Jackrabbit Fixes Critical WebDAV Session Hijack Flaw CVE-2026-92414
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:08:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Jackrabbit #CVE_2026_92414 #CVE_2026_92415 #java #Session Hijacking #WebDAV
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 16:08:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache #Apache Jackrabbit #CVE_2026_92414 #CVE_2026_92415 #java #Session Hijacking #WebDAV
Daily CyberSecurity
Apache Jackrabbit Fixes Critical WebDAV Session Hijack Flaw CVE-2026-92414
TL;DR The Apache Software Foundation has patched two Apache Jackrabbit vulnerabilities in its WebDAV components. The worst, CVE-2026-92414, scores 9.3 on CVSS 4.0 and lets an attacker hijack a cac…
⤷ Title: Dissecting Log4Shell (CVE-2021–44228): From String Interpolation to TCP Handshakes and Staged…
════════════════════════
𐀪 Author: Sharanya Avudari
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 18:56:16 GMT
════════════════════════
⌗ Tags: #docker #cybersecurity #software_engineering #application_security #java
════════════════════════
𐀪 Author: Sharanya Avudari
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 18:56:16 GMT
════════════════════════
⌗ Tags: #docker #cybersecurity #software_engineering #application_security #java
Medium
Dissecting Log4Shell (CVE-2021–44228): From String Interpolation to TCP Handshakes and Staged Enterprise Defense
Disclaimer: This analysis is for educational purposes and defensive security engineering. All testing was executed in an isolated local…
⤷ Title: Apache Tomcat Fixes Eight Flaws, Including JNDIRealm Authentication Bypass and Response Mix-Ups
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 01:37:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #Authentication Bypass #CVE_2026_101296 #CVE_2026_101356 #CVE_2026_103119 #HTTP/2 #Java security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 01:37:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #apache Tomcat #Authentication Bypass #CVE_2026_101296 #CVE_2026_101356 #CVE_2026_103119 #HTTP/2 #Java security
Daily CyberSecurity
Apache Tomcat Fixes Eight Flaws, Including JNDIRealm Authentication Bypass and Response Mix-Ups
TL;DR On October 20, 2026, the Apache Software Foundation disclosed eight Apache Tomcat vulnerabilities. Three rate Important, including a JNDIRealm authentication bypass and two flaws that can mi…
⤷ Title: Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 04:05:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Authority #CVE_2026_91403 #eMudhra #GraalVM #java #Oracle #tls
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 04:05:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Authority #CVE_2026_91403 #eMudhra #GraalVM #java #Oracle #tls
Daily CyberSecurity
Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates
TL;DR Oracle has issued an out-of-band Oracle Java security alert for CVE-2026-91403, rated CVSS 9.1. The update distrusts intermediate CA certificates tied to the eMudhra compromise in Java SE an…
⤷ Title: When Trust Fails: What the eMudhra Certificate Incident and PHP Vulnerabilities Teach Us About Zero…
════════════════════════
𐀪 Author: Ramesh Aithagoina Aka Aira
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 16:58:52 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #vulnerability #hacking #java #security
════════════════════════
𐀪 Author: Ramesh Aithagoina Aka Aira
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 16:58:52 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #vulnerability #hacking #java #security
Medium
When Trust Fails: What the eMudhra Certificate Incident and PHP Vulnerabilities Teach Us About Zero Trust Security
Two security developments in October 2026 expose a critical lesson for every software engineer: securing an application is not just about…
⤷ Title: Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:16:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_90885 #CVE_2026_94386 #CVE_2026_95664 #java #ssrf #xxe
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:16:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Camel #CVE_2026_90885 #CVE_2026_94386 #CVE_2026_95664 #java #ssrf #xxe
Daily CyberSecurity
Apache Camel Fixes Eight Flaws, Including High-Severity XXE in camel-saxon
TL;DR The Apache Camel project disclosed eight Apache Camel vulnerabilities across components such as camel-saxon, camel-aws2-s3 and camel-keycloak. The most severe, CVE-2026-90885, is a high-seve…
⤷ Title: Authentication & Authorization Eğitim Serisi — Bölüm 23: Advanced Filter Customization ve…
════════════════════════
𐀪 Author: Sahin Yelkenci
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:16:10 GMT
════════════════════════
⌗ Tags: #spring_security #authorization #java #application_security #authentication
════════════════════════
𐀪 Author: Sahin Yelkenci
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:16:10 GMT
════════════════════════
⌗ Tags: #spring_security #authorization #java #application_security #authentication
Medium
Authentication & Authorization Eğitim Serisi — Bölüm 23: Advanced Filter Customization ve Production Patterns
Modül VI — Spring Security Praxis
⤷ Title: Apache Wicket Fixes 19 Vulnerabilities in 8.20.0, 9.25.0 and 10.12.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 02:03:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #Apache Wicket vulnerabilities #Cross_Site Scripting #CVE_2026_83594 #CVE_2026_84170 #Denial of Service #java #security update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 02:03:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Wicket #Apache Wicket vulnerabilities #Cross_Site Scripting #CVE_2026_83594 #CVE_2026_84170 #Denial of Service #java #security update
Daily CyberSecurity
Apache Wicket Fixes 19 Vulnerabilities in 8.20.0, 9.25.0 and 10.12.0
TL;DR The Apache Wicket project disclosed 19 security flaws on November 1, 2026. These Apache Wicket vulnerabilities touch every supported branch of the Java web framework. The worst two score 8.3…
⤷ Title: Understanding and Preventing SSRF in Spring Boot 4.1 with RestClient
════════════════════════
𐀪 Author: Arun Kumar Meenakshi Sundaram
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 06:37:12 GMT
════════════════════════
⌗ Tags: #spring_boot #ssrf #ssrf_attack #java #spring
════════════════════════
𐀪 Author: Arun Kumar Meenakshi Sundaram
════════════════════════
ⴵ Time: Mon, 02 Nov 2026 06:37:12 GMT
════════════════════════
⌗ Tags: #spring_boot #ssrf #ssrf_attack #java #spring
Medium
Understanding and Preventing SSRF in Spring Boot 4.1 with RestClient
What is SSRF ?