CVE-2024-23052

An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...

CVE-2024-23052

CVE-2024-23052 affects WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202. The vulnerability is in the fastjson component’s parseObject() function, enabling a remote attacker to execute arbitrary code. Impact is described as remote code execution with high confidentiality, integrity, and availabil...

CVE-2024-23052

An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...

PT-2024-19646 · Wukongopensource +1 · Wukongopensource Wukongcrm +1

Name of the Vulnerable Software and Affected Versions: WuKongOpenSource WukongCRM version 72crm 9.0.1 20191202 Description: An issue in WuKongOpenSource WukongCRM allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component. Recommendations: For versio...

CVE-2024-23052

An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...

CVE-2024-23052

An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...

Exploit for Deserialization of Untrusted Data in Alibaba Fastjson

json.org CVE-2022-45688 true & false positive WTF ?? The p...

VulnCheck KEV: CVE-2017-18349

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...

org.noear:solon.serialization.fastjson (1.0.3.4), org.noear:solon.serialization.jackson (1.0.3.4) +1 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.19)

org.noear:solon MAVEN version 1.0.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon.serialization.fastjson 1.0.3.4 - org.noear:solon.serialization.jackson 1.0.3.4 -...

PT-2025-27626

Name of the Vulnerable Software and Affected Versions Hikvision Integrated Security Management Platform affected versions not specified Description An unauthenticated remote command execution issue exists in the applyCT component of the Hikvision Integrated Security Management Platform. This is d...

Fastjson Deserialization Vulnerability in YouSpace APP of UFIDA Network Technology Co.

YouSpace APP is an enterprise space management software. YouSpace APP of UFIDA Network Technology Co. Ltd. suffers from a Fastjson deserialization vulnerability, which can be exploited by attackers to execute malicious code...

org.noear:solon.serialization.fastjson (1.0.3.4), org.noear:solon.serialization.jackson (1.0.3.4) +1 more potentially affected by CVE-2023-35839 via org.noear:solon (1.0.3.19)

org.noear:solon MAVEN version 1.0.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon.serialization.fastjson 1.0.3.4 - org.noear:solon.serialization.jackson 1.0.3.4 -...

Exploit for Deserialization of Untrusted Data in Alibaba Fastjson

CVE-2022-25845-exploit Try exploiting this CVE by studying so...

Remote Code Execution (RCE)

dubbo-cluster is vulnerable to remote code execution. The vulnerability exists in the doInvoke function of BroadcastClusterInvoker.java as it does not properly handle FastJson when invoking the invoke handler and later processes in PojoUtils.realize, allowing an attacker to instantiate arbitrary...

GHSA-FPRR-RRM8-4534 Apache Dubbo vulnerable to remote code execution via Telnet Handler

Apache Dubbo is a Java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-authorization remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic...

Apache Dubbo vulnerable to remote code execution via Telnet Handler

Apache Dubbo is a Java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-authorization remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic...

CVE-2021-32824

Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods t...

CVE-2021-32824

Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods t...

Remote code execution

Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods t...

CVE-2021-32824 Regular expression Denial of Service in MooTools

Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods t...