Brian Vermeer

Exploring the Spring Security authorization bypass (CVE-2022-31692)

December 16, 2022

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

December 14, 2022

How to create SBOMs in Java with Maven and Gradle

October 31, 2022

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

October 18, 2022

How to use Java DTOs to stay secure

October 11, 2022

Best practices for managing Java dependencies

August 26, 2022

10 best practices to build a Java container with Docker

August 24, 2022

Controlling your server with a reverse shell attack

August 10, 2022

Exploring CVE-2022-33980: the Apache Commons configuration RCE vulnerability

July 8, 2022

Building a secure CI/CD pipeline with GitHub Actions for your Java Application

June 27, 2022

Spring4Shell extends to Glassfish and Payara: same vulnerability, new exploit

April 8, 2022

Spring4Shell: The zero-day RCE in the Spring Framework explained

April 1, 2022