Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
khunt is a post-exploitation toolkit that runs inside Oracle databases by compiling Java source code into stored schema objects. It enables command…
Oracle Database was the target of an attack where attackers used SQL injection to load Java code into the database, achieving code…
Powercat is a Java-based information stealer and surveillance malware distributed via fake Xeno Executor cheats for Roblox and Minecraft. It can steal…
Spring Boot is a popular Java framework used for building microservices and web applications. The CVE-2026-16723 exploit requires a Spring Boot executable…
ORANGETAIL is a Behinder-like custom Java web shell used by threat actors to maintain persistent access on compromised SonicWall SMA 1000 appliances.…
Apache Struts is a free, open-source MVC framework for creating Java web applications. CVE-2017-12611 is a Struts Freemarker tag flaw.
JDK 1.5 is an end-of-life Java Development Kit version used in outdated Digiwin SSO installations, suspected as part of the initial compromise…
JDK 1.6 is an end-of-life Java Development Kit version used in outdated Digiwin SSO installations, suspected as part of the initial compromise…
JARLEASH is a Java-based (JAR package) backdoor deployed by UAT-7810 for administration purposes, including file management, FTP, SFTP, and Netcat. It was…