Source: 캘빈의 감금원

Vendors patch Node.js RCE, Java bypass; QUIC zero-day persists

На русском
1 min

Additional recently discovered vulnerabilities

- RCE vulnerabilities were discovered and patched in Node.js 26, 24, and 22
- A zero-day was discovered that allows anyone to shut down at will servers using a certain QUIC protocol library (some still appear to be unpatched)
- A credential bypass vulnerability in Oracle Java was discovered and patched

Original publication

Authors credited by the source: c4lvinlocked

Published by Holder based on an external source.