漏洞公告

Unsafe Deserialization in jackson-databind

Unsafe Deserialization in jackson-databind

Unsafe Deserialization in jackson-databind

Serialization gadget exploit in jackson-databind

Serialization gadgets exploit in jackson-databind

Serialization gadgets exploit in jackson-databind

Code Injection in jackson-databind

Potential bypass of an upstream access control based on URL paths in Django

HTTP request smuggling in netty

Improper Authentication in Flask-AppBuilder

Session fixation in express-openid-connect

Server side request forgery in SwaggerUI

Code injection via unsafe YAML loading

APM Java Agent Local Privilege Escalation

Laravel Framework XSS in Blade templating engine

Improper Privilege Management in devise_masquerade

Instance config inline secret exposure in Grafana

Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile.

Command injection in git-it-electron

ReDos vulnerability on guest checkout email validation

SQL injection in prestashop/prestashop

Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunC

Remote Code Execution in AjaxNetProfessional