Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2022/03/18 12:01 a.m.•28 views

Deserialization of Untrusted Data in SinGooCMS.Utility

This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatt...

9.8CVSS5AI score0.01722EPSS
SaveExploits1References5Affected Software1
Prion
Prion
•added 2022/03/17 12:15 p.m.•19 views

Design/Logic Flaw

This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatt...

7.5CVSS9.5AI score0.01722EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/03/17 11:16 a.m.•10 views

CVE-2022-0749

This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatt...

9.8CVSS5.4AI score0.01722EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/03/17 12:00 a.m.•13 views

SinGooCMS.Utility 代码问题漏洞

SinGooCMS.Utility is a collection of tools for individual developers of SinGooCMS in China. Utility is a collection of tools for individual developers of SinGooCMS in China. It includes tools for configuration, files, dates, data, serialization, reflection, image processing, networking, caching,...

9.8CVSS8.3AI score0.01722EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/17 12:00 a.m.•5 views

CVE-2022-0749: Deserialization of Untrusted Data

This affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatt...

9.8CVSS7.9AI score0.01722EPSS
SaveExploits1References2
Rows per page
Query Builder