309 matches found
PT-2024-40884 · Fastjson2 · Fastjson2
Name of the Vulnerable Software and Affected Versions: fastjson2 affected versions not specified Description: The issue is related to a security exception in the fastjson2 library. A crash occurs due to a cycle in the JSONPathSegment, specifically in the CycleNameSegment$MapLoop.accept method. Th...
CVE-2024-29433
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
CVE-2024-29433
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
CVE-2024-29433: Deserialization of Untrusted Data
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
CVE-2024-29433
Alldata v0.4.6 is affected by a deserialization vulnerability within its FASTJSON component. This flaw allows an attacker to execute arbitrary commands by providing specially crafted data. The vulnerability is associated with CWE-502 . As of the current documentation, there is no information rega...
CVE-2024-29433
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
CVE-2024-29433
A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data...
ALLDATA 安全漏洞
ALLDATA is an online resource for automotive OEM information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A security vulnerability exists in ALLDATA version v0.4.6, which stems from a deserialization vulnerability in the FASTJSON component that allow...
PT-2024-22893 · Fastjson +1 · Fastjson +1
Name of the Vulnerable Software and Affected Versions: Alldata version 0.4.6 Description: A deserialization vulnerability in the FASTJSON component allows attackers to execute arbitrary commands via supplying crafted data. Recommendations: For Alldata version 0.4.6, at the moment, there is no...
jndi_tool
It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is not explicitly mentioned, but the tool is designed to exploit JNDI-related vulnerabilities, including RCE Remote Code Execution and potential log4j RCE. The target product/service is JNDI, and the vulnerability...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
Design/Logic Flaw
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
CVE-2024-23052: Deserialization of Untrusted Data
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
WuKongOpenSource WukongCRM Security Vulnerability
WuKongOpenSource WukongCRM is a Customer Relationship Management CRM system from China Wukong WuKong. A security vulnerability exists in WuKongOpenSource WukongCRM version v.72crm9.0.120191202. A remote attacker can exploit this vulnerability to execute arbitrary code via the parseObject function...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
PT-2024-19646 · Wukongopensource +1 · Wukongopensource Wukongcrm +1
Name of the Vulnerable Software and Affected Versions: WuKongOpenSource WukongCRM version 72crm 9.0.1 20191202 Description: An issue in WuKongOpenSource WukongCRM allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component. Recommendations: For versio...
CVE-2024-23052
An issue in WuKongOpenSource WukongCRM v.72crm9.0.120191202 allows a remote attacker to execute arbitrary code via the parseObject function in the fastjson component...
CVE-2024-23052
CVE-2024-23052 affects WuKongOpenSource WukongCRM v.72crm_9.0.1_20191202. The vulnerability is in the fastjson component’s parseObject() function, enabling a remote attacker to execute arbitrary code. Impact is described as remote code execution with high confidentiality, integrity, and availabil...
