fastjson-jsontype-rce-lab

Lab di rilevamento e riproduzione @JSONType remote-JAR/FD-chain di Fastjson Questo repository conserva ora due distinte linee di ricerca su Fastjson: modern-fd/ è la ricostruzione consigliata, solo-marker , della catena remote-JAR/file-descriptor in un singolo corpo di richiesta di Fastjson 1.2.8...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Esecuzione di Codice Arbitrario tramite Caricamento di JAR Non Attendibili -red?style=for-the-badge -brightgreen?style=for-the-badge Panoramica...

cve-2021-29442-Nacos-Derby-rce-exp

परिचय Nacos Derby कमांड निष्पादन भेद्यता शोषण स्क्रिप्ट, डिफ़ॉल्ट रूप से User-Agent बाईपास भेद्यता का उपयोग करती है Nacos एक ओपन-सोर्स प्लेटफ़ॉर्म है जो सेवा पंजीकरण, खोज और कॉन्फ़िगरेशन प्रबंधन के लिए उपयोग किया जाता है। इसके प्रारंभिक संस्करणों ≤2.4.0-BETA में, Nacos ने Apache Derby को एम्बेडेड...

DEBIAN-CVE-2026-12252

In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser are vulnerable to untrusted JAR code execution. These classes accept user-controllable JAR paths and execute...

EUVD-2026-30512

SzafirHost verifies the signature of the downloaded JAR file using class JarInputStream reading from the beginning of the file, but loads classes using class JarFile/URLClassLoader reading the Central Directory from the end. It can lead to remote code execution by allowing an attacker to combine ...

EUVD-2026-9875

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

CVE-2026-0848 Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

CVE-2026-0848 Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

CVE-2026-0848 Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

The vulnerability of the Validate JSP File function in the IntelliJ IDEA integrated development environment allows attackers to load any JAR files they desire.

The vulnerability of the Validate JSP File function in the IntelliJ IDEA integrated development environment is related to the transmission of critical information in open text. Exploiting this vulnerability allows a malicious actor to download arbitrary JAR files remotely...

Deserialization of untrusted data

An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. This unbounded deserialization can likely lead to remote code execution. The code can be run...