362 matches found
CVE-2025-51743
The jishenghua JSH_ERP version 2.3.1 is affected by a vulnerability in the /materialCategory/addMaterialCategory endpoint. The root cause is a fastjson deserialization flaw, which allows for the deserialization of untrusted data. This issue can lead to critical impacts on confidentiality, integri...
CVE-2025-51744
The jishenghua JSH_ERP 2.3.1 software is vulnerable to fastjson deserialization attacks via the /user/addUser endpoint. This vulnerability allows for the deserialization of untrusted data (CWE-502), which can lead to critical security impacts. While the provided documents confirm the existence of...
CVE-2025-51746
The jishenghua JSH_ERP version 2.3.1 is vulnerable to fastjson deserialization attacks via the /serialNumber/addSerialNumber API endpoint. The vulnerability specifically affects the addSerialNumber function, allowing for the deserialization of untrusted data (CWE-502). This issue could lead to cr...
CVE-2025-51743
An issue was discovered in jishenghua JSHERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks...
CVE-2025-51744: Deserialization of Untrusted Data
An issue was discovered in jishenghua JSHERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks...
CVE-2025-51745
An issue was discovered in jishenghua JSHERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks...
CVE-2025-63617
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
EUVD-2025-50782
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
CVE-2025-63617
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
CVE-2025-63617
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
ktg-mes security vulnerabilities
ktg-mes Bitter Candy MES is a production execution management system by the individual developer kutangguo. A security vulnerability exists in ktg-mes due to the use of a vulnerable version of fastjson and deserialization of insecure input data...
CVE-2025-63617
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
CVE-2025-63617
The ktg-mes (Bitter Candy MES) production execution management system is vulnerable to a fastjson deserialization issue in versions prior to commit a484f96 (2025-07-03) . The root cause is the use of a vulnerable version of the fastjson library to deserialize unsafe input data, potentially leadin...
PT-2025-46192
Name of the Vulnerable Software and Affected Versions ktg-mes versions prior to commit a484f96 2025-07-03 Description The software contains a fastjson deserialization issue. This occurs due to the use of a vulnerable version of fastjson and the deserialization of untrusted input data...
CVE-2025-63617: Deserialization of Untrusted Data
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
CVE-2025-63617
ktg-mes before commit a484f96 2025-07-03 has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data...
ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) +10 more potentially affected by CVE-2025-41254 via org.springframework:spring-websocket (4.2.5.release)
org.springframework:spring-websocket MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 1.5 -...
CVE-2025-60834
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...