Overview On April 20, 2022, NSFOCUS's CERT monitoring found that Oracle officially released the April Critical Patch Update announcement CPU (Critical Patch Update). A total of 520 vulnerabilities of varying degrees were fixed. This security update involves Oracle WebLogic Server. , Oracle MySQL, Oracle Java SE, Oracle FusionMiddleware, Oracle Retail...
Year: 2022
Apache Struts Remote Code Execution Vulnerability S2-062 (CVE-2021-31805) Alert
Overview On April 13, 2022, NSFOCUS CERT detected that Struts officially issued a security notice and fixed a remote code execution vulnerability S2-062 (CVE-2021-31805). This vulnerability is not fully repaired for S2-061. When developers use the %{…} syntax to force OGNL parsing, there are still some special TAG attributes that...
APT Group Lazarus Distributing Korean Phishing Lures to Feel Out Cryptocurrency Users
Overview Recently, NSFOCUS Security Labs captured a series of phishing documents containing specific Korean bait information. Most of these documents contain keywords such as "BTC", "ETH", "NFT", and "account information", which trick victims into opening them and then use remote template injection to implant malicious programs, thereby stealing host information....
Spring Framework Remote Code Execution Vulnerability (CVE-2022-22965) Manual
Overview Recently, NSFOCUS CERT detected a remote code execution vulnerability in Spring related frameworks. Unauthorized remote attackers can construct HTTP requests to write malicious programs on the target system to execute arbitrary code. This vulnerability is Spring framework remote code execution vulnerability. (CVE-2010-1622), but it has a wider impact. Officials...
Information Collection Technology of Cloud Native Environment (I)
Abstract Information collection is a very important part of both attack and defense, and high-quality information collected is the basis and premise of follow-up work. However, fragmentary information and the complex composition of cloud native itself bring certain challenges to information collection in cloud native environment. This series of posts...
Spring Cloud Function SPEL Expression Injection Vulnerability Alert
Overview Recently, NSFOCUS CERT detected that Spring Cloud officially fixed a SPEL expression injection vulnerability in Spring Cloud Function, because the parameter "spring.cloud.function.routing-expression" in the request header is processed as a Spel expression by the apply method of the RoutingFunction class in Spring Cloud Function, resulting in a Spel expression...
