Viewing profile — exec

Yes. I managed to reproduce the issue with slf4j + log4j2.

Not using HTTPS is a critical mistake. Adversary can just do MITM attack and send modified code to the user's browser to steal passwords. It's not best idea to share sensitive docu…

Most of internet banking systems in my country run on Java. And most of them can be affected if you know where to put this number.

I never heard back from dmoz.org. I have tried to add my customer's website years ago...

http://mailhide.recaptcha.net/d?k=01MYzNHibu_YQ5tmJpfICtsw==... Thanks!