34 matches found
PT-2025-3560 · Msfm +1 · Msfm +1
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to 2025.01.01 Description: The issue is related to a fastjson deserialization vulnerability in the component system/table/editField. This vulnerability was discovered in MSFM. Recommendations: For versions prior to...
CVE-2024-57766
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField...
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2024-57763
MSFM before 2025-01-01 contains a fastjson deserialization vulnerability in the component system/table/addField. The CVE-2024-57763 entry identifies high-impact risks to confidentiality and integrity (CVSS 9.1, Network attack, no privileges, no user interaction). Available connected sources indic...
CVE-2024-57764
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add...
PT-2025-3557 · Msfm +1 · Msfm +1
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to 2025.01.01 Description: The issue is related to a fastjson deserialization vulnerability in the component system/table/addField. This vulnerability was discovered in MSFM. Recommendations: For versions prior to...
ALLDATA 安全漏洞
ALLDATA is an online resource for automotive OEM information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A security vulnerability exists in ALLDATA version v0.4.6, which stems from a deserialization vulnerability in the FASTJSON component that allow...
VulnCheck KEV: CVE-2017-18349
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...
Fastjson 代码问题漏洞
Fastjson is a Java-based fast JSON parser/generator. versions prior to Fastjson 1.2.83 have a security vulnerability that stems from the ease of bypassing the default autoType off restriction to deserialize untrusted data, which is exploited by attackers to cause code execution...
PT-2022-2951
Name of the Vulnerable Software and Affected Versions com.alibaba:fastjson versions prior to 1.2.83 Description The vulnerability is related to the deserialization of untrusted data by bypassing the default autoType shutdown restrictions in the Fastjson library. This can be exploited under certai...
vulhub
This is an open-source collection of pre-built vulnerable docker environments. It is not a PoC exploit for a specific CVE, but rather a toolkit for testing and demonstrating vulnerabilities. The repository contains a variety of vulnerable environments, including ones for Flask, Apache, and Jenkin...
Command Execution Vulnerability in Fastjson JtaTransactionConfig
fastJson is a json serialization tool produced by Alibaba . Fastjson JtaTransactionConfig has a command execution vulnerability that can be exploited by a remote attacker to construct attack code that triggers a remote code execution vulnerability and gain control of the server...
Denial Of Service (DoS)
fastjson is vulnerable to denial of service. An out-of-bounds exception in the chars array in the writeHex method of the SerializeWriter class allows an attacker to cause a denial of service condition using a malicious object with a large byte member...
