CVE-2019-18935

CVE-2019-18935 针对 Telerik UI for ASP.NET AJAX 中 .NET JSON 反序列化漏洞的概念验证利用代码，可实现远程代码执行。 描述 Telerik UI for ASP.NET AJAX 是一套广泛用于 Web 应用程序的 UI 组件库。它以不安全的方式反序列化 JSON 对象，导致可在软件底层主机上执行任意远程代码。更多信息请参阅： DerpCon 演讲 .NET Roulette（幻灯片），详细介绍了利用不安全反序列化的额外基础知识，并将其应用于此漏洞，同时讲解了一些在 ASP.NET Web 应用程序上获取 Shell 的技巧和窍门。...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON JavaScript Object Notation data to a service that reads and processes it. This can lead to a Denial of Service Do...

jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON JavaScript Object Notation data to a service that reads and processes it. This can lead to a Denial of Service Do...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON JavaScript Object Notation data to a service that reads and processes it. This can lead to a Denial of Service Do...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 and 3.0.1, Spring Boot 1.5.9 and 2.0 M6 contain a remote code execution caused by processing malicious PATCH requests with crafted JSON data, letting attackers execute arbitrary Java code, exploit requires sending malicious PATCH requests. id: CVE-2017-8046 info: name: Spri...

CVE-2025-55182-POC

CVE-2025-55182 – 命令注入漏洞扫描器 包含真实命令输出的完整概念验证 此仓库包含一个基于 Python 的概念验证 PoC 扫描器，用于 CVE-2025-55182，演示攻击者如何通过基于 JSON 的 POST 请求利用命令注入漏洞。 该工具允许安全研究人员和渗透测试人员通过发送命令并获取其执行输出来验证目标是否存在漏洞。 ⚠️ 免责声明 本项目仅用于教育、研究和授权的渗透测试目的 。 您全权负责遵守所有适用法律。 请勿将本工具用于您不拥有或未获得明确测试许可的系统。 作者对任何滥用或造成的损害不承担任何责任 。 DORK SHODAN:...

CVE-2025-71383

The Dbit WIFI4 N300 1.0.0 devices are susceptible to a crash of the management interface . The vulnerability is triggered by a request from the local Wi-Fi network that lacks a username or password field for the /api/login endpoint. This issue stems from an error within a JSON parser . No specifi...

EUVD-2025-211036

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...

GHSA-JP82-F5MQ-HWHP Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Summary deserializeTypedArray casts the source node to ArrayBuffer without checking it and never bounds the element count. Pass a plain object with a length property and it hits the array-like TypedArray constructor, allocating that many elements. The offset guard above it can't stop this:...

NPM: Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

NPM: Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization vulnerability discovered by ? in WordPress Npm seroval versions = 1.6.2...

Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Summary deserializeTypedArray casts the source node to ArrayBuffer without checking it and never bounds the element count. Pass a plain object with a length property and it hits the array-like TypedArray constructor, allocating that many elements. The offset guard above it can't stop this:...

EUVD-2026-91056

stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk...

EUVD-2026-91057

stream-json has a prototype pollution issue: Assembler writes this.currentthis.key on plain objects...

CVE-2026-47668

CVE-2026-47668 — DbGate 远程代码执行 DbGate JSON 脚本执行器（dbgate-serve ≤ 7.1.8）中的未认证 RCE。 评估工具：CVE-2026-47668.py — 仅限授权测试。 | ---|--- CVE| CVE-2026-47668 严重性| 严重 产品| DbGate / dbgate-serve 受影响版本| ≤ 7.1.8 修复版本| ≥ 7.1.9 CVSS 3.1| AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CWE| CWE-20, CWE-94, CWE-1188 漏洞 标题： DbGate ...

CVE-2026-105748

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...

CVE-2026-9277

CVE-2026-9277 - Shell-Quote 命令注入漏洞利用 一个专门用于验证和演示 CVE-2026-9277 的概念验证（PoC）漏洞利用脚本——该漏洞是 shell-quote 库旧版本（= 1.8.3）中存在的一个结构性命令注入漏洞。 该扫描器对输入 JSON 载荷执行深度结构操作，通过递归遍历暴露远程代码执行（RCE）向量，并利用动态网络基线计时引擎防止误报。 主要特性 递归 JSON 遍历： 自动检测并变异多层级嵌套 JSON 结构或类 GraphQL 配置中隐藏的目标数组。 组合变异矩阵： 测试高级数组操作场景，包括特定索引插入、绝对列表覆盖以及分散数组对。 自...

CVE-2026-105676

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...