4 matches found
jsonorg-fp3
json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is sanitised with a simple method of counting characters, therefore estimating the max depth of the DOM tree to be generated, and enforcin...
Coverage-Guided Multi-Agent Harness Generation for Java Library Fuzzing
Coverage-guided fuzzing has proven effective for software testing, but targeting library code requires specialized fuzz harnesses that translate fuzzer-generated inputs into valid API invocations. Manual harness creation is time-consuming and requires deep understanding of API semantics,...
Exploit for Deserialization of Untrusted Data in Alibaba Fastjson
json.org CVE-2022-45688 true & false positive WTF ?? The p...
Oracle: Security Advisory (ELSA-2011-0568)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...