CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

EUVD-2026-66175

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368: Deserialization of Untrusted Data

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2026-51368

Beijing Tongtech Co., Ltd tongweb v.7.0.24 is vulnerable to remote code execution (RCE) due to a flaw in the Spring HttpInovkerServiceExporter component. A remote attacker can trigger this vulnerability by sending a crafted request to the console/heimdall endpoint. The vulnerability is categorize...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

PT-2026-81857

Name of the Vulnerable Software and Affected Versions tongweb version 7.0.24 Description An issue in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code by sending a crafted request to the 'console/heimdall' endpoint. Recommendations At the moment,...

Arbitrary File Download Vulnerability in TongWeb of Beijing Oriental Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. Ltd. TongWeb suffers from an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive files on the server...

Command Execution Vulnerability in TongWeb Management Console (CNVD-2022-16268)

TongWeb is an application server from Beijing Orientop Technology Co. A command execution vulnerability exists in the TongWeb management console that can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in TongWEB Application Server

TongWEB Application Server is a standard, secure, highly available and feature-rich enterprise application server.TongWEB Application Server is vulnerable to file upload, which can be exploited to upload a WebShell and gain control of the server...

TongWEB application server is vulnerable to arbitrary file download

TongWEB Application Server is a standard, secure, highly available and feature-rich enterprise-class application server.TongWEB Application Server is vulnerable to arbitrary file download, which can be exploited by attackers to obtain sensitive information...

TongWEB application server is vulnerable to arbitrary file upload

TongWEB Application Server is a standard, secure, highly available and feature-rich enterprise application server.TongWEB Application Server is vulnerable to arbitrary file upload, which can be exploited by attackers to upload WEBSHELL and gain control of the server...

Command Execution Vulnerability in TongWeb Management Console

TongWeb is an application server from Beijing Orientop Technology Co. A command execution vulnerability exists in the TongWeb management console that can be exploited by an attacker to execute illegal commands...

File Upload Vulnerability in TongWeb Management Console

TongWeb is a J2EE-compliant application server product . A file upload vulnerability exists in the TongWeb management console that can be exploited by an attacker to gain server control privileges...

Stored XSS Vulnerability in TongWeb Management Console at Beijing Orientop Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. A stored XSS vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information such as user cookies...

Unauthorized Access Vulnerability in TongWeb Management Console of Beijing Orientop Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. An unauthorized access vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...