Ideas, Answers, and Perspectives

The Hillstone Blog

September 20, 2018

Vulnerability Notification: Apache Struts 2 namespace Expression Language Injection

[Overview] Apache Struts2 is an MVC framework for building Java-based web applications. In the MVC design pattern, Struts2 acts as a controller to establish data interaction between the model and the view. Recently, Apache Struts2...

Threat Research

Vulnerability Notification: Mining Trojans

September 5, 2018 | Hillstone Networks

[Overview] With the rise of virtual currency, a new type of attack – mining Trojans quietly prevailed. Different from the ransomware encrypting user key data and virus...

E-Series Edge Protection Hillstone Services S-Series StoneOS T-Series X Series

Vulnerability Notification: Jenkins CI Server getOrCreate Policy Bypass

August 22, 2018 | Hillstone Networks

[Overview] Jenkins is an open source, continuous integration and delivery application based on Java development that runs in a Servlet container. Jenkins allows developers to...

E-Series Edge Protection Hillstone Services S-Series StoneOS T-Series X Series

Vulnerability Notification: Oracle WebLogic Server Activator Insecure Deserialization

August 6, 2018 | Hillstone Networks

[Overview] WebLogic Server is a Java application server platform for developing, integrating, deploying, and managing large distributed Web applications and database...

E-Series Edge Protection Hillstone Services S-Series StoneOS T-Series X Series

Vulnerability Notification: Asterisk PJSIP Endpoint Presence Disclosure

July 24, 2018 | Hillstone Networks

[Overview] Asterisk is an open source software that implements the Private Branch eXchange (PBX) of telephone, allowing multiple affiliated telephones or user agents to call each...

E-Series Edge Protection Hillstone Services S-Series StoneOS T-Series X Series