https://feed.craftedsignal.io/vendors/kongxin-github/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 11:38:49 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-java-library-mgmt-auth/Mon, 09 Nov 2026 11:38:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-java-library-mgmt-auth/An improper authorization vulnerability in the Swing UI layer of Java Library Management System has been identified, allowing for potential remote exploitation.<p>A vulnerability exists in kongxin-github Java_Library_Management_System (up to commit 70a6eb6b96fe64575d8051f1a59055bfc5dc5885). The vulnerability stems from improper authorization in the Swing UI Layer within src/view/MainInterface.java, specifically affecting the functions UpdateAdmin.deleteuser, UpdateAdmin.updateadmin, UpdateAdmin.updatepass, Book.addbook, Book.modifybook, Book.deletebook, Category.addcategory, Category.setcategory, and Landing.sureadmin. The vulnerability is capable of being exploited remotely. The exploit has been publicly disclosed. The project maintainers have been informed but have not provided a response.</p> highadvisory