97 matches found
CVE-2026-6009
⚠️ 免责声明： 本仓库仅用于教育目的和授权的安全测试。请勿对非您所有或未经您明确书面许可的系统使用。 CVE-2026-6009 概念验证 摘要 Jaspersoft report 库版本 = 7.0.3 存在通过利用 Java 反序列化流程导致的 远程代码执行 RCE 漏洞。此漏洞允许攻击者在使用该版本库的系统上建立反向 shell 连接。 库： Jaspersoft report 受影响版本： = 7.0.3 漏洞类型： 通过 Java 反序列化实现 RCE CVE-2026-6009 CVSS 评分： 8.7（高） 日期： 2026-05-19 漏洞描述...
CVE-2023-37790
CVE-2023-37790 作者：KaizenSecurity 描述：发现 Jaspersoft Clarity PPM 版本 14.3.0.298 的“个人资料图片上传”功能存在任意文件上传漏洞。 1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790 2. https://vuldb.com/?id.244831 3. https://debricked.com/vulnerability-database/vulnerability/CVE-2023-37790 4...
CVE-2026-16626: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity reference vulnerability unauthenticated in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
GHSA-9WXQ-MWQW-8HHG Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
UBUNTU-CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
EUVD-2026-30962
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
CVE-2026-6009 is a Java deserialization vulnerability in the Jaspersoft Reports Library that can lead to Remote Code Execution (RCE) on affected systems. The cited sources describe the issue as a Java Deserialisation Vulnerability, but do not specify affected versions, vulnerable components withi...
CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
PT-2026-41987
Name of the Vulnerable Software and Affected Versions Jaspersoft Reports Library affected versions not specified Description A Java deserialization issue exists in the Jaspersoft Reports Library. This flaw can lead to Remote Code Execution RCE, which is a type of attack where an attacker can...
CVE-2026-6009: Deserialization of Untrusted Data
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
Jaspersoft Reports Library 代码问题漏洞
Jaspersoft Reports Library is a Java report engine developed by Jaspersoft Corporation in the United States. It can generate reports in various formats such as PDF, HTML, Excel, and Word. There is a code vulnerability in Jaspersoft Reports Library, which stems from a Java deserialization issue...
EUVD-2017-6418
Malware in sbrugna...
Jaspersoft Jasper Reports JRLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Jaspersoft Jasper Reports. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...