Lucene search
+L

3040 matches found

Kitploit
Kitploit
added 2026/08/30 4:07 p.m.3 views

CVE-2019-14439

CVE-2019-14439 Jackson-databind RCE...

7.5CVSS7.1AI score0.1085EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 8:32 a.m.2 views

Demo-Exploit-Jackson-RCE

Demo-Exploit-Jackson-RCE Based on the project jackson-rce-via-spel this project serves as an example web application to test multiple attack vectors file upload, forms on the Jackson-databind vulnerability. Introduction Based on an Angular7 frontend and a spring-boot backend different attack...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 6:49 a.m.5 views

CVE-2020-9547

CVE-2020-9547:FasterXML/jackson-databind Remote Code Execution Vulnerability...

9.8CVSS7.2AI score0.18383EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.37 views

FasterXML jackson-databind - Deserialization Remote Code Execution

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap. This vulnerability allows attackers to execute arbitrary code through deserialization of...

9.8CVSS7.4AI score0.18383EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.125 views

FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core. id: CVE-2020-9548 info: name: FasterXML Jackson Databind =2.9.10.4 - Remote Code Execution author: tomaquet18...

9.8CVSS7.1AI score0.18345EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/30 5:39 a.m.3 views

CVE-2020-9548

CVE-2020-9548: Vulnerabilidad de ejecución remota de código en FasterXML/jackson-databind...

9.8CVSS7.1AI score0.18345EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 4:46 a.m.3 views

CVE-2020-8840

CVE-2020-8840: FasterXML/jackson-databind Remote Code Execution Vulnerability 0x00 Introduction jackson-databind is a JSON processing library under the FasterXML project. 0x01 Vulnerability Overview On February 19, NVD released a security advisory disclosing a remote code execution vulnerability...

9.8CVSS7.1AI score0.26587EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/30 1:19 a.m.5 views

jackson-CVE-2020-8840

CVE-2020-8840 FasterXML/jackson-databind रिमोट कोड एक्जीक्यूशन भेद्यता...

9.8CVSS7.1AI score0.26587EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/29 9:15 p.m.6 views

CVE-2019-12384

CVE-2019-12384 Jackson RCE und SSRF 0x01 python -m SimpleHTTPServer root@kitploit: python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql root@kitploit: CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd...

5.9CVSS6.7AI score0.45205EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/29 11:05 a.m.3 views

CVE-2020-8840

CVE-2020-8840 Codice dell'ambiente di riproduzione per l'analisi della vulnerabilità di esecuzione remota di codice Jackson-databind CVE-2020-8840. Il progetto include: payload in jackson-databind e Fastjson classe malevola WebServer marshalsec-0.0.3-SNAPSHOT-all.jar già compilato Introduzione al...

9.8CVSS7.1AI score0.26587EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/28 9:33 a.m.5 views

CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 Laboratorio di deserializzazione non sicura in Java Applicazione Java REST di base vulnerabile alla deserializzazione non sicura, che porta a RCE. Il progetto deve essere eseguito su Java 8u45 Basato su Maven con le seguenti dipendenze: jackson-databind 2.2.2 commons-collections 3.1...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/28 12:14 a.m.1 views

study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

Untersuchungsbericht zu Struts2-Schwachstellen S2-054, S2-055 und Jackson-Schwachstellen CVE-2017-7525, CVE-2017-15095 Eine Zusammenfassung der wichtigsten Punkte in lesbarer Form wurde veröffentlicht. Empfohlen für alle, die zuerst einen Überblick benötigen oder wenig Zeit haben. SSTtechlog 08 z...

9.8CVSS7.1AI score0.37721EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/27 2:41 p.m.4 views

CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 Schwachstellenbeschreibung Wenn Default Typing aktiviert ist und sich im Klassenpfad mysql-connector-java in Version 8.0.15 veröffentlicht am 1.2.2019 oder niedriger befindet, kann ein Angreifer durch Senden böswilliger JSON-Daten beliebige Dateien lesen. Die Bibliothek...

7.5CVSS7.1AI score0.21949EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 12:42 a.m.4 views

CVE-2020-10673

भेद्यता विवरण हाल ही में, AsiaInfo सुरक्षा नेटवर्क आक्रमण और रक्षा प्रयोगशाला ने ट्रैक किया कि jackson-databind ने एक JNDI इंजेक्शन ब्लैकलिस्ट क्लास को अपडेट किया है। यदि प्रोजेक्ट पैकेज में इस क्लास का jar पैकेज मौजूद है और JDK संस्करण इंजेक्शन संस्करण को पूरा करता है, तो JNDI इंजेक्शन का उपयोग...

8.8CVSS7.1AI score0.08028EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2020-11113

CVE-2020-11113 CVE-2020-11113:Jackson-databind RCE...

8.8CVSS8.3AI score0.06278EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2020-36188

Descrizione FasterXML jackson-databind 2.x prima della versione 2.9.10.8 gestisce erroneamente l'interazione tra gadget di serializzazione e tipizzazione, correlata a com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource Come ottenere l'RCE pom.xml root@kitploit:...

8.1CVSS8.3AI score0.10911EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2020-35728

Beschreibung FasterXML jackson-databind 2.x vor 2.9.10.8 behandelt die Interaktion zwischen Serialisierungs-Gadgets und Typisierung fehlerhaft, was mit com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool auch bekannt als eingebettetes Xalan in org.glassfish.web/javax.servlet.jsp.jst...

8.1CVSS8.3AI score0.12504EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2020-36184

Descrizione FasterXML jackson-databind 2.x precedente alla 2.9.10.8 gestisce male l'interazione tra gadget di serializzazione e tipizzazione, correlata a org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. Come eseguire RCE pom.xml root@kitploit: 4.0.0 com.jacksonTest jacksonTest...

8.8CVSS7.6AI score0.10379EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.4 views

CVE-2020-36179

Descrição CVE-2020-36179: FasterXML jackson-databind 2.x anterior a 2.9.10.8 lida incorretamente com a interação entre gadgets de serialização e tipagem, relacionado a oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. CVE-2020-36180: FasterXML jackson-databind 2.x anterior a 2.9.10.8 li...

8.8CVSS6.7AI score0.20929EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

CVE-2020-10673

CVE-2020-10673 CVE-2020-10673:jackson-databind RCE...

8.8CVSS7.1AI score0.08028EPSS
SaveExploits0
Rows per page
Query Builder