Detection-and-Mitigation-script-for-CVE-2021-42717

Detection-and-Mitigation-script-for-CVE-2021-42717 Detection and Mitigation script for CVE-2021-42717 - ModSecurity DoS Vulnerability in JSON Parsing ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in...

Apache-couchdb-CVE-2017-12635

Vulnerabilidad de omisión de permisos verticales en Couchdb CVE-2017-12635 Apache CouchDB es una base de datos de código abierto que se centra en la facilidad de uso y en ser "una base de datos completamente web". Es una base de datos NoSQL que utiliza JSON como formato de almacenamiento,...

json_cve_2020_10663

Workaround for CVE-2020-10663 vulnerability in json gem The json gem has a security vulnerability CVE-2020-10663. When parsing certain JSON documents, the json gem can be coerced into creating arbitrary objects in the target system. Users are strongly advised to upgrade to json 2.3.0 or later. Fo...

CVE-2026-54350-Budibase-NoSQL-Injection

CVE-2026-54350 — Budibase Unauthenticated NoSQL Operator Injection Unauthenticated JSON/NoSQL operator injection in Budibase. Any anonymous visitor of a published Budibase app that exposes a PUBLIC query backed by a document datasource MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST wi...

crack-0.1.8-fixed

= crack Really simple JSON and XML parsing, ripped from Merb and Rails. The XML parser is ripped from Merb and the JSON parser is ripped from Rails. I take no credit, just packaged them for all to enjoy and easily use. == note on releases Releases are tagged on github and also released as gems on...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...

CVE-2022-33171

CVE-2022-33171: Inyección SQL en TypeORM Nota: Este es un análisis en curso de CVE-2022-33171. Los detalles aquí proporcionados pueden actualizarse a medida que se disponga de más información.actualmente no funciona Detalles de la Vulnerabilidad ID CVE: CVE-2022-33171 Producto: TypeORM Versiones...

Fedora 45 : mongo-c-driver (2026-83792d666c)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-83792d666c advisory. libmongoc 2.5.2 Fixes - Fix OCSP error handling. CVE-2026-84964 - Fix unsafe casts during JSON parsing. CVE-2026-84965 - Fix possible unsafe...

CVE-2026-0915-json-Patch.-V2.0

Uploading 1000000837.png… CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade Lösung für CVE-2026-0915 - Schützt vor unsicherer JSON-Parsing durch strikte Schema-Validierung. 🚨 Sicherheitshinweis Dieses Patch behebt CVE-2026-0915 - eine kritische...

CVE-2023-54393

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server...

CVE-2023-54390

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

CVE-2024-58381 PocketMine-MP before 5.11.1 Denial of Service via LoginPacket

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties,...

EUVD-2024-55754

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties,...

CVE-2023-54393

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in the LoginPacket JSON parsing logic, caused by improper validation in the JsonMapper dependency. An unauthenticated attacker can send malformed JSON structures within a LoginPacket to crash the server . The CVSS v3.1...

CVE-2023-54393 PocketMine-MP before 4.20.5 Denial of Service via LoginPacket

PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attackers can send malformed JSON structures in LoginPacket to crash the server...

EUVD-2023-60621

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

CVE-2023-54390

PocketMine-MP versions before 5.3.1 and 4.23.1 are vulnerable to a denial of service caused by improper null value handling in arrays during LoginPacket JSON parsing. An unauthenticated, remote attacker can send malformed JSON containing unexpected null elements in the LoginPacket to crash the se...

CVE-2023-54390 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

CVE-2023-54390 PocketMine-MP before 5.3.1 Denial of Service via LoginPacket

PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attackers can send malformed JSON with unexpected null elements in LoginPacket to crash the server...

CVE-2022-51009

PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash...