Exploit for Incomplete List of Disallowed Inputs in Fasterxml Jackson-Databind

🔥 Jackson RCE Exploiter - Enterprise Bypass Edition !Versi...

EUVD-2022-1319

Malicious code in bioql PyPI...

EUVD-2023-27901

Malicious code in bioql PyPI...

EUVD-2022-2414

Malicious code in bioql PyPI...

EUVD-2023-41810

Malicious code in bioql PyPI...

EUVD-2023-0856

Malicious code in bioql PyPI...

EUVD-2022-7159

Malicious code in bioql PyPI...

EUVD-2022-6411

Malicious code in bioql PyPI...

EUVD-2023-2347

Malicious code in bioql PyPI...

EUVD-2025-17366

Malicious code in bioql PyPI...

EUVD-2022-5362

Malicious code in bioql PyPI...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-core-2.10.3.jar

Summary IBM Watson Discovery Cartridge contains a vulnerable version of jackson-core-2.10.3.jar Vulnerability Details CVEID:CVE-2025-49128 DESCRIPTION: Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor. Starting in versio...

OSV-2025-765 Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=446027675 Crash type: Security exception Crash state: com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer java.base/java.lang.StringUTF16.newBytesFor java.base/java.lang.StringUTF16.toBytes...

The vulnerability of the Jackson-Core library from the FasterXML project allows attackers to compromise the accessibility of protected information.

The vulnerability of the Jackson-Core library from the FasterXML project is related to buffer overflows based on a stack mechanism. Exploiting this vulnerability can allow an attacker to compromise the accessibility of the protected information...

marshalsec

It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...

BIT-NIFI-2021-20190

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update

A new security update is now available for Red Hat Single Sign-On 7.6 from the Customer Portal. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This upda...

pki-deps:10.6 security update

An update is available for module.relaxngDatatype, module.jackson-core, apache-commons-collections, module.xml-commons-apis, glassfish-jaxb-api, apache-commons-net, xalan-j2, xmlstreambuffer, xsom, xml-commons-apis, module.slf4j, stax-ex, module.glassfish-jaxb-api, module.bea-stax, relaxngDatatyp...

RLSA-2025:14126 Important: pki-deps:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System. Security Fixes: com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError CVE-2025-52999 For more details about the security issues,...