CVE-2019-20493

cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled SEC-520...

CVE-2019-20493: Improper Neutralization of Input During Web Page Generation

cPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled SEC-520...

Debian DLA-2080-1 : iperf3 security update

An issue has been found in iperf3, an Internet Protocol bandwidth measuring tool. Bad handling of UTF8/16 strings in an embedded library could cause a denial of service crash or execution of arbitrary code by putting special characters in a JSON string, which triggers a heap-based buffer overflow...

Security Bulletin: Current Release of IBM® SDK for Node.js™ is affected by CVE-2014-5256

Summary V8 JavaScript engine denial of service vulnerability Vulnerability Details CVE-ID: CVE-2014-5256 DESCRIPTION: V8 shipped with Node.js is vulnerable to a denial of service, caused by a memory corruption error. By sending an overly long JSON string, a remote attacker could exploit this...

Remote Code Execution (RCE)

openpsa/midcom is vulnerable to remote code execution RCE attacks. The library does not sanitize the json string before deserialization, allowing a malicious user to inject and execute arbitrary code through it...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

UBUNTU-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

ShopNC一处信息泄露可导致任意用户订单泄露

简要描述： ShopNC在前台的用户隐私信息防护做得很好，但忽略了一处api的防护，导致漏洞产生 漏洞可直接获取包含用户订单详情的json字符串 详细说明： 使用官方商城做演示（http://www.shopnctest.com/c2c/2013/test/ 用户名shopnc 密码shopnc） url:http://www.shopnctest.com/c2c/2013/test/mobile/28aeb56bf14c9a5f826f8ad65bc6d7f0.php?commend=orderdetail&orderid=570 oderid变量可遍历 正确返回是这样的：...