Posted by Daniel Owens via Fulldisclosure on Oct 28Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation (JSON) deserialisers available today, like in "Struts2 and Related Framework Array/Collection DoS" (26 October 2025) and "JSON Deserialiser Unconstrained Resource Consumption Quick... Weiterlesen: Continued Apache Struts2 JSON Plugin Insecure Deserialisation
Intelligence View
⚡ tsecurity.de Intelligence
Continued Apache Struts2 JSON Plugin Insecure Deserialisation
Posted by Daniel Owens via Fulldisclosure on Oct 28Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
31 Quellen
CVE-2023-54196 | Linux Kernel up to 5.15.112/6.1.80/6.3.3 ntfs3 null pointer dereference
30 weitere Quellen
VVulDB Updatesvor 6 Std.CVE-2023-54192 | Linux Kernel up to 6.1.28/6.2.15/6.3.2 f2fs __replace_atomic_write_block null pointer dereference (Nessus ID 281732) VVulDB Updatesvor 5 Std.CVE-2026-77206 | Libreswan up to 5.3.2/5.4/5.4.0 EAP null pointer dereference (WID-SEC-2026-4183) VVulDB Updatesvor 5 Std.CVE-2026-77207 | Libreswan Project up to 5.3.2/5.4.0 PKCS#7 SEC_PKCS7GetCertificateList null pointer dereference (WID-SEC-2026-4183) LLinux, GNU/Linux, free soft…vor 11 Std.Linux Kernel Developers Considering Removal Of KGDB Debugging Functionality VVulDB Updatesvor 8 Std.CVE-2023-53696 | Linux Kernel up to 5.15.106/6.1.23/6.2.10 scsi qla2x00_probe_one initialization (Nessus ID 284764 / WID-SEC-2025-2394) VVulDB Updatesvor 8 Std.CVE-2023-53695 | Linux Kernel up to 6.2.2 UDF File Parser privilege escalation (Nessus ID 276910 / WID-SEC-2025-2394)
+24
9 Quellen
IT Security News Hourly Summary 2026-10-29 05h : 6 posts
8 weitere Quellen
IIT Security Newsvor 2 Std.IT Security News Hourly Summary 2026-10-29 06h : 4 posts IIT Security Newsvor 1 Std.IT Security News Hourly Summary 2026-10-29 07h : 5 posts IIT Security Newsvor 6 Std.IT Security News Hourly Summary 2026-10-29 02h : 5 posts IIT Security Newsvor 5 Std.IT Security News Hourly Summary 2026-10-29 03h : 4 posts IIT Security Newsvor 7 Std.IT Security News Hourly Summary 2026-10-29 01h : 9 posts IIT Security Newsvor 8 Std.IT Security News Daily Summary 2026-10-28
+2
8 Quellen
Neues MacBook Pro mit OLED-Touchscreen bringt nach 10 Jahren legendäres Feature zurück
7 weitere Quellen
Aappgefahren.devor 33 Min.Apple erklärt, warum das MacBook Pro erst jetzt einen Touchscreen bekommen hat Iit-daily.netvor 52 Min.Neu bei Apple: MacBook bekommt erstmals einen Touchscreen NNewsvor 7 Std.You Can Spend Nearly $15K on Apple’s New Touchscreen MacBook Pro. Why? CCNETvor 7 Std.A Touchscreen MacBook Pro Just Invites More Filthy Fingerprints WWIREDvor 8 Std.The 2,000-Nit OLED in Apple’s New MacBook Is a Big Deal TTechCrunchvor 8 Std.Apple’s touchscreen MacBook Pro pushes laptop pricing to a new extreme
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4305359/sichere-programmierung/continued-apache-struts2-json-plugin-insecure-deserialisation/