iHash

News and How to's

java

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

by Leave a Comment

Feb 28, 2023Ravie LakshmananSoftware Security / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 (CVSS score: 7.5), the issue impacts ZK Framework versions 9.6.1, … [Read more...] about CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

Create your own instrumentation with the Java Agent Plugin

by Leave a Comment

TroubleshootingThere are some common problems you might run into when creating your plugin:Still experimental?The OpenTelemetry bridge was added in Elastic APM Java Agent version 1.30.0 — so that is the earliest version you can use this plugin mechanism with — and it was initially added as experimental technology. Depending on which version you are using, you may need to have  … [Read more...] about Create your own instrumentation with the Java Agent Plugin

Researcher Releases PoC for Recent Java Cryptographic Vulnerability

by Leave a Comment

A proof-of-concept (PoC) code demonstrating a newly disclosed digital signature bypass vulnerability in Java has been shared online. The high-severity flaw in question, CVE-2022-21449 (CVSS score: 7.5), impacts the following version of Java SE and Oracle GraalVM Enterprise Edition - Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18 Oracle GraalVM Enterprise Edition: 20.3.5, … [Read more...] about Researcher Releases PoC for Recent Java Cryptographic Vulnerability

Get Lifetime Access to This 60-Hour Java Programming Training Bundle @ 97% Discount

by Leave a Comment

Java is a very versatile programming language. From Android apps to Oracle databases, it can be used to power a wide range of software and systems. As with most technical skills, the best way to learn Java is through building your own projects. But you can definitely speed things up with high-quality training. The Complete 2022 Java Coder Bundle provides plenty of that — nine … [Read more...] about Get Lifetime Access to This 60-Hour Java Programming Training Bundle @ 97% Discount

Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

by Leave a Comment

The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system. Tracked as CVE-2022-22965, the high-severity flaw impacts Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and other older, … [Read more...] about Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

How To Install Java (JRE) 8 on Mac OS X 10.11 El Capitan

by Leave a Comment

Java is no longer installed with a OS X 10.11 El Capitan clean install, and you’ll find that after updating a Mac a prior version of JRE may no longer function. You may come across when trying to use some particular applications or web content,  “This application requires the legacy Java SE 6 runtime which is unavailable for this version of OS X.” error message, which means if … [Read more...] about How To Install Java (JRE) 8 on Mac OS X 10.11 El Capitan

How to Get Working Juniper Network Connect on OS X Mavericks

by Leave a Comment

If you happen to use Juniper SSL and if you are using Mac, then you are very likely to stumble upon nice surprise when connecting to VPN with Java 1.7 or after Java update. Error message when logging in via browser: Java plugin required. If you click on greyed out area (missing plugin), you are redirected to Oracle Java webpage. If you install Oracle Java 1.7 Juniper … [Read more...] about How to Get Working Juniper Network Connect on OS X Mavericks