230 matches found
dromara__hutool_CVE-2018-17297_4-1-1111
A set of tools that keep Java sweet. -- 홈페이지: http://hutool.cn/ -- -- QQ 그룹②: 871141901 -- 소개 Hutool은 Java 도구 모음입니다. 단지 도구 모음일 뿐이지만, 모든 코드 줄을 단순화하고 모든 메서드를 줄여 Java 언어도 '달콤하게' 만들어 줍니다. Hutool은 처음에 제 프로젝트의 'util' 패키지를 정리한 것에서 시작했습니다. 이후 점차 비즈니스와 무관한 기능들을 축적하고 추가했으며, 다른 오픈소스 프로젝트의 정수를 폭넓게 배워 직접...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to JSON-Java
Summary IBM webMethods BPM uses JSON-Java for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts...
Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to json-20190722.jar
Summary IBM webMethods BPM uses json-20190722.jar for reading and parsing of JSON data. Vulnerability Details CVEID:CVE-2023-5072 DESCRIPTION: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite...
Remote Code Execution (RCE)
cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...
EUVD-2018-0685
Malware in sbrugna...
EUVD-2022-7498
Malicious code in bioql PyPI...
EUVD-2023-1735
Malicious code in bioql PyPI...
EUVD-2023-2589
Malicious code in bioql PyPI...
EUVD-2023-2459
Malicious code in bioql PyPI...
EUVD-2023-0377
Malicious code in bioql PyPI...
EUVD-2023-1851
Malicious code in bioql PyPI...
EUVD-2025-31174
Malicious code in bioql PyPI...
EUVD-2022-7491
Malicious code in bioql PyPI...
EUVD-2023-2592
Malicious code in bioql PyPI...
EUVD-2022-1118
Malicious code in bioql PyPI...
EUVD-2023-0359
Malicious code in bioql PyPI...
GHSA-GCFH-36X4-MGJ6 Hutool allows remote code execution (RCE) via the QLExpressEngine class
An issue was discovered in chinabugotech hutool before 5.8.40 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution RCE via the QLExpressEngine class...
Hutool allows remote code execution (RCE) via the QLExpressEngine class
An issue was discovered in chinabugotech hutool before 5.8.40 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution RCE via the QLExpressEngine class...
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via the QLExpressEngine process. An attacker can execute arbitrary code by submitting crafted expressions that trigger...
