Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.
Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires
Source: The Hacker News
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 65.109.35.209 — 1963 requests (recent log) 89.167.35.212 — 465 requests (recent log) 197.144.9.214 — 338 requests (recent
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 96 requests (recent log) 80.94.95.211 — 29 requests (recent log) 216.244.66.232 — 26 requests (recent
Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs An Android app that can draw over other windows and write to shared storage can slip