CVE-2025-55182-poc-json

CVE-2025-55182-poc-json CVE-2025-55182-poc-json en0f...

Security update for the Java stack

This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant Updated to version 1.10.18: Security issues fixed: CVE-2021-36374: Fixed excessive memory allocation when readin...

SUSE-SU-2026:4677-1 Security update for the Java stack

This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant Updated to version 1.10.18: - Security issues fixed: - CVE-2021-36374: Fixed excessive memory allocation when...

CVE-2025-11988

1 Extract the public cryptoajax nonce UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' PAGEURL='http://localhost/wordpress//' NONCE=$curl -s "$PAGEURL" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s' Fallback...

Ollama - Remote Code Execution

Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. id: CVE-2024-37032 info: name: Ollama ...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 and 3.0.1, Spring Boot 1.5.9 and 2.0 M6 contain a remote code execution caused by processing malicious PATCH requests with crafted JSON data, letting attackers execute arbitrary Java code, exploit requires sending malicious PATCH requests. id: CVE-2017-8046 info: name: Spri...

CLEANSTART-2026-WY72170 jackson-databind binds a JSON string to a javax

CVE-2026-68497 affects multiple packages. jackson-databind binds a JSON string to a javax. See references for individual vulnerability details...

CVE-2026-95155

The FasterXML Jackson 1.x library is vulnerable to a Denial of Service (DoS) attack, specifically confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13 . The root cause is uncontrolled recursion (CWE-674), where an attacker can supply deeply nested JSON input to an app...

EUVD-2026-102127

FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue...

PT-2026-115112

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4, joserfc.jws.deserialize json accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verify general json loop performs no...

CVE-2026-95155

FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue...

CVE-2026-95179

The lottie-android library (version 6.7.1 and earlier, including master ) is vulnerable to a Denial of Service (DoS) attack. A remote attacker can trigger this by providing a crafted Lottie animation JSON that contains a cyclic precomposition reference graph . This configuration leads to uncontro...

PT-2026-114827

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the uniqueItems keyword validation uses an On² pairwise comparison loop with no short-circuit or size limit. A remote unauthenticated attacker can submit a moderately-sized JSON array that consumes...

PT-2026-114979

Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.145.0 Description Loading an attacker-controlled OpenAPI document through LoadFromData, LoadFromFile, or LoadFromURI can cause the loading process to panic. This occurs because the openapi3.Loader can dereferenc...

CVE-2026-55383

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype,...

CVE-2026-55383

Prior to version 2.4.0 , the InvoiceShelf web & mobile app is vulnerable to a token type confusion issue. The application fails to verify the mailable_type when processing numeric mailable_id values from EmailLog tokens on public routes for invoices, estimates, and payments. Additionally, the JSO...

CVE-2026-55383 InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype,...

EUVD-2026-101610

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype,...

CVE-2026-55383 InvoiceShelf: Public EmailLog token type confusion allows cross-company invoice disclosure

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public customer invoice, estimate, and payment routes use an EmailLog token's numeric mailableid without verifying mailabletype,...

mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin

A flaw was found in the mysqljson plugin in MariaDB. The plugin incorrectly assumes that imported MySQL tables contain valid binary JavaScript Object Notation JSON data. An attacker can exploit this issue by supplying a specially crafted MySQL table containing invalid JSON data, triggering an...