362 matches found
CVE-2025-60834
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...
CVE-2025-60828
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface...
CVE-2025-60828
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface...
CVE-2025-60834
A fastjson deserialization vulnerability exists in uzy-ssm-mall v1.1.0 , an SSM framework used for building e-commerce and bookstore malls. The flaw occurs because the software improperly processes data during the conversion of JSON data into objects using the fastjson library. An attacker can pr...
WukongCRM security vulnerabilities
WukongCRM is a Customer Relationship Management CRM system from Wukong, China. A security vulnerability exists in WukongCRM version 9.0-JAVA, which stems from a fastjson deserialization issue in the /OaExamine/setOaExamine interface that could lead to arbitrary code execution...
EUVD-2025-33170
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface...
CVE-2025-60828
WukongCRM version 9.0-JAVA contains a fastjson deserialization vulnerability located in the /OaExamine/setOaExamine interface. This security flaw allows for arbitrary code execution . While the vulnerability is confirmed, there is currently no information regarding a newer version containing a fi...
CVE-2025-60834
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...
CVE-2025-60828
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface...
CVE-2025-60834
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...
PT-2025-41267
Name of the Vulnerable Software and Affected Versions uzy-ssm-mall version 1.1.0 Description A fastjson deserialization issue exists in uzy-ssm-mall version 1.1.0. This allows attackers to execute arbitrary code by providing a specially crafted input. The vulnerability relates to how the software...
CVE-2025-60834: Deserialization of Untrusted Data
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...
uzy-ssm-mall security vulnerability
uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh individual developer for building e-commerce, bookstore malls, customer management, and more. A security vulnerability exists in uzy-ssm-mall version 1.1.0, which stems from improper fastjson deserialization and could lead to the...
CVE-2025-60828: Deserialization of Untrusted Data
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface...
CVE-2025-60828
WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine interface...
EUVD-2025-33164
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...
PT-2025-41259
Name of the Vulnerable Software and Affected Versions WukongCRM version 9.0-JAVA Description The software contains a fastjson deserialization issue through the /OaExamine/setOaExamine API endpoint. The vulnerability is triggered via this interface. Recommendations At the moment, there is no...
EUVD-2024-53732
Malicious code in bioql PyPI...