Apache-couchdb-CVE-2017-12635

Couchdb 수직 권한 우회 취약점CVE-2017-12635 Apache CouchDB는 사용 편의성과 "웹을 완전히 수용하는 데이터베이스"가 되는 데 중점을 둔 오픈소스 데이터베이스입니다. JSON을 저장 형식으로, JavaScript를 쿼리 언어로, MapReduce와 HTTP를 API로 사용하는 NoSQL 데이터베이스입니다. BBC는 동적 콘텐츠 표시 플랫폼에, Credit Suisse는 내부 상품 부문의 마켓 프레임워크에, Meebo는 소셜 플랫폼웹 및 애플리케이션에 사용하는 등 폭넓게 사용됩니다. 2017년 11월...

CVE-2026-0915-json-Patch.-V2.0

Uploading 1000000837.png… CVE-2026-0915-json-Patch.-V2.0 バグを修正 - glibc 🔒 JSONバリデータセキュリティパッチ CVE-2026-0915向けエンタープライズグレードのソリューション - 厳格なスキーマ検証による安全でないJSONパースからの保護。 🚨 セキュリティ通知 このパッチはCVE-2026-0915 を修正します - インジェクション攻撃を引き起こす可能性のあるJSONパース実装における重大な脆弱性です。 ✨ 機能...

CVE-2026-84963

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...

CVE-2026-84965

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

CVE-2026-84970

A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...

EUVD-2026-70515

An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...

CVE-2026-84965

CVE-2026-84965 affects the BSON library within the MongoDB C Driver (tracked as CDRIVER-6405 ). An integer wraparound in an allocation size calculation during JSON parsing can cause a buffer to be freed while a subsequent copy still writes through the stale pointer (use-after-free). This is explo...

CVE-2026-84970

A numeric truncation (32-bit length truncation) in the JSON parsing component of the MongoDB C++ Driver's BSON library allows a local attacker to supply an oversized JSON string to the library's public parsing interface, causing a heap over-read (out-of-bounds memory returned to the caller), a si...

EUVD-2026-70505

A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...

Detection-and-Mitigation-script-for-CVE-2021-42717

Detection-and-Mitigation-script-for-CVE-2021-42717 CVE-2021-42717 탐지 및 완화 스크립트 - JSON 파싱의 ModSecurity DoS 취약점 ModSecurity 3.x3.0.5는 과도하게 중첩된 JSON 객체를 잘못 처리합니다. 수만 단계 깊이로 중첩된 조작된 JSON 객체는 웹 서버가 정상적인 요청을 처리하지 못하게 만들 수 있습니다. 적당히 큰예: 300KB HTTP 요청조차도 제한된 NGINX 워커 프로세스 중 하나를 수 분 동안 점유하여 머신에서 사용 가능한 CP...

json_cve_2020_10663

CVE-2020-10663에 대한 해결 방법json gem 취약점 json gem에는 보안 취약점 CVE-2020-10663이 있습니다. 특정 JSON 문서를 구문 분석할 때 json gem은 대상 시스템에서 임의의 객체를 생성하도록 강제될 수 있습니다. 사용자는 json 2.3.0 이상으로 업그레이드할 것을 강력히 권장합니다. json 버전을 업그레이드할 수 없는 사용자를 위해, 이 gemjsoncve202010663은 사용자의 json 버전을 CVE-2020-10663에 대해 monkey-patch합니다. 현재 버전의...

CVE-2026-83772

A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...

CVE-2026-83772 Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection

A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...

EUVD-2026-68984

A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...

CVE-2026-83772

Cobham SATCOM VSAT7090 Maritime Satellite Router versions up to 20260704 are affected by a command injection vulnerability in the JSON Parsing component. The root cause lies in the function c_set_reports_decode within the file mail-report.sh , where unsanitized manipulation of the sender/recipien...

PT-2026-84119

Name of the Vulnerable Software and Affected Versions Cobham SATCOM VSAT7090 Maritime Satellite Router versions prior to 20260704 Description Command injection is possible via remote attack in the JSON Parsing component. The issue exists within the c set reports decode function of the...

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Budibase Unauthenticated NoSQL Operator Injection Unauthenticated JSON/NoSQL operator injection in Budibase. Any anonymous visitor of a published Budibase app that exposes a PUBLIC query backed by a document datasource MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST wi...

CVE-2022-33171

CVE-2022-33171: TypeORM SQL 주입 참고: 이 문서는 CVE-2022-33171에 대한 진행 중인 분석입니다. 여기에 제공된 세부 사항은 추가 정보가 제공됨에 따라 업데이트될 수 있습니다.현재 작동하지 않음 취약점 세부 정보 CVE ID: CVE-2022-33171 제품: TypeORM 영향 받는 버전: 0.3.0 취약점 유형: SQL Injection 공개 날짜: June 28, 2022 설명 TypeORM 0.3.0 이전 버전의 findOneid 및 findOneOrFailid 함수는 문자열 또는...

crack-0.1.8-fixed

= crack Really simple JSON and XML parsing, ripped from Merb and Rails. The XML parser is ripped from Merb and the JSON parser is ripped from Rails. I take no credit, just packaged them for all to enjoy and easily use. == 릴리즈에 관한 참고사항 릴리즈는 GitHub에 태그되며, GitHub와 RubyForge에 gem으로 배포됩니다. Master 브랜치는...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...