Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers

Source: Help Net Security· Mirko Zorz· August 5, 2026

An attacker sends a single web request to a Bonita server and lands inside an internal API that assumed nobody could reach it. The request arrives unauthenticated. From there the attacker runs code on the host. Bonita BPM handles loan approvals, insurance cla…

This story was reported by Help Net Security. Read the full original article:

Read on Help Net Security

More in Developer & Tools

View all

domani 0.1.2

Official Python SDK for the domani API - domains, email, and identity for AI agents.

Pypi.org · Aug 5, 2026

winnex-madhava-sec added to PyPI

Mathematically Guaranteed Agent Security Framework — Cauchy-Schwarz bound pruning for AI agent attack detection and amplification.

Pypi.org · Aug 5, 2026

Parenting can make a woman feel both more herself and less herself in the same afternoon — and for many, that contradiction is the most honest description of the whole experience

The most destabilizing part of motherhood isn't the exhaustion or the joy—it's feeling both collapse into each other with no framework to make sense of it. The post Parenting can make a woman feel both more herself and less herself in the same afternoon — and…

Artfulparent.com · Aug 5, 2026

autoagent-core 0.18.0

LLM agent library with tool use, dynamic tool generation, and software evolution capabilities

Pypi.org · Aug 5, 2026