369 matches found
CVE-2024-29433
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
ALLDATA security vulnerabilities
ALLDATA is an online resource for automotive OEM information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A security vulnerability exists in ALLDATA version v0.4.6, which stems from a deserialization vulnerability in the FASTJSON component that allow...
jndi_tool
It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is not explicitly mentioned, but the tool is designed to exploit JNDI-related vulnerabilities, including RCE Remote Code Execution and potential log4j RCE. The target product/service is JNDI, and the vulnerability...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
Design/Logic Flaw
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
CVE-2024-23052: Deserialization of Untrusted Data
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
WuKongOpenSource WukongCRM Security Vulnerability
WuKongOpenSource WukongCRM is a Customer Relationship Management CRM system from China Wukong WuKong. A security vulnerability exists in WuKongOpenSource WukongCRM version v.72crm9.0.120191202. A remote attacker can exploit this vulnerability to execute arbitrary code via the parseObject function...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
CVE-2024-23052
CVE-2024-23052 affects WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202. The vulnerability is in the fastjson component’s parseObject() function, enabling a remote attacker to execute arbitrary code. Impact is described as remote code execution with high confidentiality, integrity, and availabil...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
PT-2024-19646 · Wukongopensource +1 · Wukongopensource Wukongcrm +1
Name of the Vulnerable Software and Affected Versions: WuKongOpenSource WukongCRM version 72crm 9.0.1 20191202 Description: An issue in WuKongOpenSource WukongCRM allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component. Recommendations: For versio...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
Exploit for Deserialization of Untrusted Data in Alibaba Fastjson
json.org CVE-2022-45688 true & false positive WTF ?? The p...
VulnCheck KEV: CVE-2017-18349
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...
org.noear:solon.serialization.fastjson (1.0.3.4), org.noear:solon.serialization.jackson (1.0.3.4) +1 more potentially affected by CVE-2023-48967 via org.noear:solon (1.0.3.19)
org.noear:solon MAVEN version 1.0.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon.serialization.fastjson 1.0.3.4 - org.noear:solon.serialization.jackson 1.0.3.4 -...
PT-2025-27626
Name of the Vulnerable Software and Affected Versions Hikvision Integrated Security Management Platform affected versions not specified Description An unauthenticated remote command execution issue exists in the applyCT component of the Hikvision Integrated Security Management Platform. This is d...
Fastjson Deserialization Vulnerability in YouSpace APP of UFIDA Network Technology Co.
YouSpace APP is an enterprise space management software. YouSpace APP of UFIDA Network Technology Co. Ltd. suffers from a Fastjson deserialization vulnerability, which can be exploited by attackers to execute malicious code...
org.noear:solon.serialization.fastjson (1.0.3.4), org.noear:solon.serialization.jackson (1.0.3.4) +1 more potentially affected by CVE-2023-35839 via org.noear:solon (1.0.3.19)
org.noear:solon MAVEN version 1.0.3.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:solon.serialization.fastjson 1.0.3.4 - org.noear:solon.serialization.jackson 1.0.3.4 -...