60 matches found
Deserialization of untrusted data
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabilit...
CVE-2023-3308 whaleal IceFrog Aviator Template Engine deserialization
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabilit...
CVE-2023-3308
CVE-2023-3308 concerns whaleal IceFrog v1.1.8, where the vulnerability is in the Aviator Template Engine. The provided documents consistently describe a deserialization vulnerability in that component, enabling untrusted data to be deserialized within whaleal IceFrog. Exploitation is acknowledged...
CVE-2023-3308 whaleal IceFrog Aviator Template Engine deserialization
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabilit...
CVE-2023-3308: Deserialization of Untrusted Data
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerabilit...
whaleal IceFrog 代码问题漏洞
whaleal IceFrog is a small but comprehensive Java tool library from whaleal. A code issue vulnerability exists in whaleal IceFrog version 1.1.8, which stems from a problem with the component Aviator Template Engine that causes deserialization...
PT-2023-24173 · Unknown · Whaleal Icefrog +1
Name of the Vulnerable Software and Affected Versions: whaleal IceFrog version 1.1.8 Description: A problematic vulnerability has been found in the Aviator Template Engine component, leading to deserialization of untrusted data. The manipulation with this issue may be used since the exploit has...
GHSA-6C25-CXCC-PMC4 Dromara hutool vulnerable to SQL Injection
SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...
Dromara hutool vulnerable to SQL Injection
SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...
Sql injection
SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...
PT-2023-19451 · Dromara · Hutool
Name of the Vulnerable Software and Affected Versions: Dromara hutool versions prior to 5.8.21 Description: The issue allows an attacker to execute arbitrary code via the aviator template engine. This is a SQL Injection vulnerability. Recommendations: For versions prior to 5.8.21, update to versi...
CVE-2023-24163
CVE-2023-24163 describes a SQL injection in Dromara Hutool that can lead to remote code execution via the Aviator template engine. Public notes consistently cite Hutool v5.8.x ranges: vulnerable up to 5.8.21 (pre-5.8.21), with references indicating exploitation could occur through template evalua...
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...
CVE-2023-24163: Improper Neutralization of Special Elements used in an SQL Command
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...
CVE-2021-41862
AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library BCEL...
aviator-berlin.de XSS vulnerability
Open Bug Bounty ID: OBB-637682 Description| Value ---|--- Affected Website:| aviator-berlin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
