CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

34 matches found

Kitploit•added 2026/10/05 1:29 a.m.•13 views

CVE-2021-23758-POC

CVE-2021-23758-POC 이 저장소는 ajaxpro의 취약점에 대한 학습 목적으로 생성되었습니다. CVE-2021-23758 ID로 공개되었습니다. POC POST /ajaxpro/CVE202123758POC.demo,CVE202123758.ashx HTTP/2 Host: localhost:44375 Content-Length: 567 Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96" X-Ajaxpro-Method: TestAjax Content-Type: text/plain...

9.8CVSS8.6AI score0.82578EPSS

SaveExploits3References2

VulnCheck KEV•added 2026/08/20 12:00 a.m.•29 views

VulnCheck KEV: CVE-2021-23758

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

9.8CVSS8.7AI score0.82578EPSS

SaveIn wildExploits3References5

RedhatCVE•added 2026/01/16 10:26 p.m.•18 views

CVE-2023-7334

Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...

9.8CVSS6.6AI score0.01115EPSS

SaveExploits1References1

EUVD•added 2026/01/16 12:30 a.m.•20 views

EUVD-2023-60535

9.3CVSS7.8AI score0.01115EPSS

SaveExploits1References7

OSV•added 2026/01/15 10:16 p.m.•14 views

CVE-2023-7334

9.8CVSS6.5AI score0.01115EPSS

SaveExploits1References6

NVD•added 2026/01/15 10:16 p.m.•18 views

CVE-2023-7334

9.8CVSS0.01115EPSS

SaveExploits1References6

attackerkb•added 2026/01/15 9:44 p.m.•8 views

CVE-2023-7334

9.8CVSS6.5AI score0.01115EPSS

SaveExploits1References3

CVE•added 2026/01/15 9:44 p.m.•77 views

CVE-2023-7334

The CVE-2023-7334 entry affects Changjetong T+ versions up to 16.x. It describes a .NET deserialization vulnerability in an AjaxPro endpoint that allows remote code execution. An attacker can craft a request to /tplus/ajaxpro/Ufida.T.CodeBehind._PriorityLevel,App_Code.ashx?method=GetStoreWarehous...

9.8CVSS6.3AI score0.01115EPSS

SaveIn wildExploits1References6Affected Software1

Cvelist•added 2026/01/15 9:44 p.m.•58 views

CVE-2023-7334 Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE

9.3CVSS0.01115EPSS

SaveExploits1References6

Vulnrichment•added 2026/01/15 9:44 p.m.•9 views

CVE-2023-7334 Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE

9.3CVSS6.3AI score0.01115EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2026/01/15 12:00 a.m.•3 views

CVE-2023-7334: Deserialization of Untrusted Data

9.8CVSS6.2AI score0.01115EPSS

SaveExploits1References1

VulnCheck KEV•added 2026/01/15 12:00 a.m.•16 views

VulnCheck KEV: CVE-2023-7334

9.8CVSS6.2AI score0.01115EPSS

SaveIn wildExploits1References213

CNNVD•added 2026/01/15 12:00 a.m.•17 views

Chanjet TPlus code issue vulnerabilities

Chanjet TPlus is an enterprise cloud platform developed by Chanjet Corporation. Versions of Chanjet TPlus 16.x and earlier contained a code vulnerability caused by a .NET deserialization issue in the AjaxPro endpoint, which could lead to remote code execution...

9.8CVSS6.2AI score0.01115EPSS

SaveExploits1References7

Positive Technologies•added 2026/01/15 12:00 a.m.•21 views

PT-2026-3134

Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind. PriorityLevel,App Code.ashx?method=GetStoreWarehouseBySto...

9.3CVSS8.2AI score0.01115EPSS

SaveExploits1References7

NVD•added 2023/12/05 12:15 a.m.•44 views

CVE-2023-49289

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS0.00628EPSS

SaveExploits0References3

Prion•added 2023/12/05 12:15 a.m.•34 views

Cross site scripting

5.8CVSS6.2AI score0.00628EPSS

SaveExploits0References3Affected Software1

GitLab Advisory Database•added 2023/12/05 12:00 a.m.•45 views

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package is vulnerable cross site scripting attacks. Releases before version 21.12.22.1 ar...

6.3CVSS6.3AI score0.00628EPSS

SaveExploits0References5Affected Software1

Cvelist•added 2023/12/04 11:53 p.m.•39 views

CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional

6.3CVSS6.3AI score0.00628EPSS

SaveExploits0References3

CVE•added 2023/12/04 11:53 p.m.•71 views

CVE-2023-49289

CVE-2023-49289 affects Ajax.NET Professional (AjaxPro) for Microsoft ASP.NET. Affected versions before 21.12.22.1 are vulnerable to Cross-Site Scripting (XSS) through the proxy JavaScript generation mechanism. The vulnerability entails missing input validation/encoding in client-server interactio...

6.3CVSS5.7AI score0.00628EPSS

SaveExploits0References3Affected Software1

Packet Storm•added 2023/11/14 12:00 a.m.•678 views

AjaxPro Deserialization Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AjaxPro Deserialization Remote Code Execution', 'Description' = %q This module leverages an insecure deserialization of data to get remote code...

9.8CVSS6.9AI score0.82578EPSS

SaveExploits3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by