97 matches found
CVE-2026-6009
⚠️ 면책 조항: 이 저장소는 교육 목적 및 승인된 보안 테스트 용도로만 사용됩니다. 소유하지 않았거나 명시적 서면 허가를 받지 않은 시스템에 대해 사용하지 마세요. CVE-2026-6009 개념 증명 요약 Jaspersoft report 라이브러리 버전 = 7.0.3은 Java 역직렬화 흐름을 악용하여 원격 코드 실행RCE에 취약합니다. 이 취약점으로 인해 공격자는 이 라이브러리 버전을 사용하는 시스템에서 리버스 셸 연결을 수행할 수 있습니다. 라이브러리: Jaspersoft report 영향 받는 버전: = 7.0.3 취약점...
CVE-2023-37790
CVE-2023-37790 저자: KaizenSecurity 설명: Jaspersoft Clarity PPM 버전 14.3.0.298에서 프로필 사진 업로드 기능을 통해 임의 파일 업로드 취약점이 발견되었습니다. 1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790 2. https://vuldb.com/?id.244831 3. https://debricked.com/vulnerability-database/vulnerability/CVE-2023-37790 4...
CVE-2026-16626: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity reference vulnerability unauthenticated in Jaspersoft JasperReports Server. This issue affects JasperReports Server: from 9.0.0 before HF-9 and from 10.0.0 before HF-10...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
GHSA-9WXQ-MWQW-8HHG Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
UBUNTU-CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
EUVD-2026-30962
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
CVE-2026-6009
CVE-2026-6009 is a Java deserialization vulnerability in the Jaspersoft Reports Library that can lead to Remote Code Execution (RCE) on affected systems. The cited sources describe the issue as a Java Deserialisation Vulnerability, but do not specify affected versions, vulnerable components withi...
CVE-2026-6009 Jaspersoft Library Deserialisation Vulnerability
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
PT-2026-41987
Name of the Vulnerable Software and Affected Versions Jaspersoft Reports Library affected versions not specified Description A Java deserialization issue exists in the Jaspersoft Reports Library. This flaw can lead to Remote Code Execution RCE, which is a type of attack where an attacker can...
CVE-2026-6009: Deserialization of Untrusted Data
Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...
Jaspersoft Reports Library 代码问题漏洞
Jaspersoft Reports Library is a Java report engine developed by Jaspersoft Corporation in the United States. It can generate reports in various formats such as PDF, HTML, Excel, and Word. There is a code vulnerability in Jaspersoft Reports Library, which stems from a Java deserialization issue...
EUVD-2017-6418
Malware in sbrugna...
Jaspersoft Jasper Reports JRLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Jaspersoft Jasper Reports. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...