A high-severity authentication bypass vulnerability in a widely used open source Java framework is under active exploit by threat actors, who are using the flaw to deploy backdoors to unpatched ...

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added CVE-2022-36537 to its "Known Exploited Vulnerabilities Catalog" after threat actors began actively exploiting the remote code ...

Potix Corporation, the creator and chief commercial supporter of the open source ZK framework, this week released a new test suite for ZK Java Web applications. The ZK Application Test Suite, or ZATS ...