Batik parse double vulnerability — Echoes: Cyber Veil Lifted

Based in San Francisco Bay Area, Securesql is a blog by John Menerick. His insights dissect complex systems, offering a masterclass in cyber guardianship through expert analysis and cutting-edge protective strategies.

Jun 22

Jun 22 Batik parse double vulnerability

It is interesting to see Batik's parse double vulnerability exist to this day. Anyone want to crash Opera or popular, open source software?

https://issues.apache.org/jira/browse/BATIK-1023

Jun 23 A simple way to make easy bug bounty money? Solr on Jetty XSS

Jun 4 Unpatched Cloud9 XSS and potential remote code execution vulnerability