11 matches found
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
EUVD-2021-14095
Malware in sbrugna...
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
Deserialization of untrusted data
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
CVE-2021-27335
CVE-2021-27335 affects KollectApps prior to 4.8.16c due to insecure Java deserialization. The root cause is deserializing untrusted data, enabling Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter. The vulnerability allows an attacker who can reach the application to tri...
PT-2021-17401
Name of the Vulnerable Software and Affected Versions KollectApps versions prior to 4.8.16c Description The issue is related to insecure Java deserialization, which can lead to Remote Code Execution. This is achieved via a ysoserial.payloads.CommonsCollections parameter. Recommendations For...
CVE-2021-27335: Deserialization of Untrusted Data
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
KollectApps Code Issue Vulnerability
kollect KollectApps is an application from the individual developers of kollect Kollect in Germany. Offers to automatically collect emails and phone numbers of people who send you contact information via inbox or comments. A security vulnerability exists in KollectApps. The vulnerability stems fr...