BIT-ACTIVEMQ-2021-21344 XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...

BIT-ACTIVEMQ-2021-21341 XStream can cause a Denial of Service

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of...

EUVD-2021-1590

Malware in sbrugna...

EUVD-2021-1851

Malware in sbrugna...

EUVD-2021-1751

Malware in sbrugna...

EUVD-2020-0471

Malware in sbrugna...

EUVD-2021-1642

Malware in sbrugna...

EUVD-2021-0620

Malware in sbrugna...

EUVD-2021-1743

Malware in sbrugna...

EUVD-2021-0606

Malware in sbrugna...

EUVD-2021-0673

Malware in sbrugna...

EUVD-2021-1605

Malware in sbrugna...

EUVD-2021-0595

Malware in sbrugna...

EUVD-2021-1541

Malware in sbrugna...

EUVD-2021-0596

Malware in sbrugna...

EUVD-2024-3262

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-29505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has...

Linux Distros Unpatched Vulnerability : CVE-2022-41966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow...

BIT-JENKINS-2021-43859 Denial of Service by injecting highly recursive collections or maps in XStream

XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulatin...

CVE-2018-17200

The Apache OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. This service takes the serviceContent parameter in the request and deserializes it using XStream. This XStream instance is slightly guard...