Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Navigating the Complexities of Spring4Shell [CVE-2022-22965]

netspi.com | vulnerability | CVE-2022-22965 | #rce | #java | #vulnerability-analysis | #spring4shell | #cve-2022-22965 | #spring-framework

Summary

Explore the intricacies of Spring4Shell discovery and remediation and learn how the vulnerability [CVE-2022-22965] may impact you.
CVE
CVE-2022-22965
Published
Collected

original ↗

Related coverage

research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
vulnerability · netspi.com
CVE-2026-78902: XSS to RCE in pfSense with one DNS request
NetSPI reports CVE-2026-78902, a stored cross-site scripting issue in the pfSense pfBlockerNG package that can be escalated to remote code execution with a single DNS request.
vulnerability · netspi.com
[CVE-2023-44487] NetSPI’s Analysis of HTTP/2 Rapid Reset
Learn about HTTP/2 Rapid Reset (CVE-2023-44487) and see how Attack Surface Management detects HTTP/2 uses to streamline patches.
vulnerability · netspi.com
[CVE-2021-44228] Log4j: Is My Organization Impacted?
Find out if your organization is vulnerable to the Log4j vulnerabilities, read about the impact of CVE-2021-44228 and its variants, and learn mitigation steps to take.
vulnerability · bishopfox.com
Signature Optional - Analysis of CVE-2026-28323
CVE-2026-28323 is a CVSS 9.8 SAML auth bypass in SolarWinds Web Help Desk. A single forged POST request grants unauthenticated access to any valid account.
Medium · vulnerability · depthfirst.com
Casting a Net(ty) for Bugs, and Catching a Big One (CVE-2025-59419)
Netty's SMTP codec allowed CRLF injection in user input, letting attackers append forged mail commands that bypass SPF, DKIM and DMARC; depthfirst's agent found it, tracked as CVE-2025-59419.
back