LXware

@lxware_x

LWware is responsible for the commercial operation of FIT2CLOUD's open-source projects 1Panel and JumpServer.

Hong Kong

lxware.hk

Joined November 2024

12 Following

111 Followers

Replies Reposts Media Articles

LXware
@lxware_x
Nov 2
Check out the new documentation. Rebuilt end to end, now running on Rspress, with llms.txt for AI agents: jumpserver.com/docs
Soon
@Soon_Iter
Nov 2
JumpServer’s docs look fantastic 👏 🦀 Great to see what the team has built with Rspress jumpserver.com/docs
LXware
@lxware_x
Sep 17
AWS Console credentials in a shared doc? New guide: put them behind JumpServer. Auto-discover IAM users Rotate + auto-verify passwords Auto sign-in, session recording jumpserver.com/blog/manage-aw… #JumpServer #PAM #AWS
LXware
@lxware_x
Aug 21
JumpServer v4.10.19-lts released: KOTL visualized ops, Magnus port consolidation with auto protocol detection, clipboard access control for RDP/VNC, file transfer account policies, custom platform automation (web asset password changes), Chen SQL parser upgrade (PostgreSQL +
LXware
@lxware_x
Aug 12
JumpServer is affected by CVE-2026-16723 (fastjson RCE, CVSS 9.0) via our Chen component. Fixed in: → v3.10.22 LTS (V3) → v4.10.17 LTS (V4) fastjson dependency removed entirely. Advisory: jumpserver.com/blog/jumpserve… If you run JumpServer, upgrade now. No auth needed to exploit.
Kirill Firsov
@k_firsov
Jul 19
We found a gadget-free RCE in Fastjson 1.2.83 - the final release of the 1.x line, and still one of the most widely-deployed Java JSON libraries in production today, even with 2.x around. No classpath gadget. One payload-> RCE.
3
LXware
@lxware_x
Aug 3
JumpServer v4.10.18-lts released — Chen web terminal gets long SQL parsing & multi-session memory optimization, plus 11 bug fixes across KoKo, Docker isolation, Redis session sharing, and Luna UI. Full notes: jumpserver.com/blog/jumpserve… GitHub: github.com/jumpserver/jum… #JumpServer

LXware

LXware’s posts