EUVD-2019-16062

Malware in sbrugna...

CVE-2019-6503

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method...

cskefu 安全漏洞

cskefu Chunsong Customer Service is an open source, free intelligent customer service system open-sourced by Chatopera in China. A security vulnerability exists in cskefu version v7, which stems from an insufficient session expiration check, allowing an attacker to exploit old sessions for...

CVE-2019-6503

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method...

CVE-2019-6503

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method...

Deserialization of untrusted data

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method...

CVE-2019-6503

CVE-2019-6503 affects Chatopera cosin v3.10.0. The root cause is a server‑side deserialization vulnerability where an attacker can execute commands by uploading maliciously crafted files, tied to TemplateController.java impsave and MainUtils.toObject. Public metrics indicate high/critical severit...

CVE-2019-6503

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method...

CVE-2019-6503: Deserialization of Untrusted Data

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method...