Apache Storm Client vulnerability allows deserialization of untrusted state store data
Apache Storm Client before 3.1.0 deserializes untrusted data from state store with disabled Kryo class registration, enabling arbitrary code execution.
3 stories, newest first · one card per story
Apache Storm Client before 3.1.0 deserializes untrusted data from state store with disabled Kryo class registration, enabling arbitrary code execution.
A new Rust-based WhatsApp client using egui GUI framework launched on GitHub.
Updates to openvox-agent, server and database versions 9.2.0+, 8.18.0+, 8.32.0+ mitigate RCE and impersonation issues.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views