Posted by Daniel Owens via Fulldisclosure on Oct 28Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation (JSON) deserialisers available today, like in "Struts2 and Related Framework Array/Collection DoS" (26 October 2025) and "JSON Deserialiser Unconstrained Resource Consumption Quick... Weiterlesen: Continued Apache Struts2 JSON Plugin Insecure Deserialisation
Intelligence View
⚡ tsecurity.de Intelligence
Continued Apache Struts2 JSON Plugin Insecure Deserialisation
Posted by Daniel Owens via Fulldisclosure on Oct 28Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
25 Bronnen
CVE-2023-54227 | Linux Kernel up to 6.5.4 /mnt nr_hw_queues memory leak (Nessus ID 319348 / WID-SEC-2025-2941)
24 andere bronnen
IIT Security News2 uur geledenHackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers VVulDB Updates6 uur geledenCVE-2023-54196 | Linux Kernel up to 5.15.112/6.1.80/6.3.3 ntfs3 null pointer dereference VVulDB Updates6 uur geledenCVE-2023-54192 | Linux Kernel up to 6.1.28/6.2.15/6.3.2 f2fs __replace_atomic_write_block null pointer dereference (Nessus ID 281732) LLinux, GNU/Linux, free soft…11 uur geledenLinux Kernel Developers Considering Removal Of KGDB Debugging Functionality VVulDB Updates8 uur geledenCVE-2023-53696 | Linux Kernel up to 5.15.106/6.1.23/6.2.10 scsi qla2x00_probe_one initialization (Nessus ID 284764 / WID-SEC-2025-2394) VVulDB Updates8 uur geledenCVE-2023-53695 | Linux Kernel up to 6.2.2 UDF File Parser privilege escalation (Nessus ID 276910 / WID-SEC-2025-2394)
+18
12 Bronnen
CVE-2026-116839 | Ubiquiti airMAX M up to 6.3.25 cross-site request forgery (EUVD-2026-110579)
11 andere bronnen
VVulDB Updates2 uur geledenCVE-2026-96666 | Schema App Structured Data Plugin up to 2.3.2 on WordPress Remove Microdata Output Filter cross site scripting (EUVD-2026-112589) VVulDB Updates2 uur geledenCVE-2026-96669 | wpscripts Food Store Plugin up to 1.5.5 on WordPress Cookie service_type/type cross site scripting (EUVD-2026-112586) VVulDB Updates2 uur geledenCVE-2026-96741 | mlfactory DSGVO All in one for WP Plugin up to 5.0 on WordPress Comment Content cross site scripting (EUVD-2026-112585) VVulDB Updates2 uur geledenCVE-2026-66092 | Apereo openEQUELLA up to 2026.1 Pre-Login Notice /api/preloginnotice cross site scripting (EUVD-2026-112568) VVulDB Updates2 uur geledenCVE-2026-113409 | Canva Ortto Plugin up to 1.0.24 cross site scripting (EUVD-2026-112571) VVulDB Updates2 uur geledenCVE-2026-16889 | Apereo openEQUELLA up to 2026.0 Image Upload Endpoint image name cross site scripting (EUVD-2026-112563)
+5
7 Bronnen
CVE-2026-93757 | Wild Apricot Login Plugin up to 1.0.18 on WordPress SSO Authentication Module.php syncWaContact improper authentication (EUVD-2026-112591)
6 andere bronnen
VVulDB Updates2 uur geledenCVE-2026-96228 | sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress Login final_login_ajax_action sslcare_login_phone/cap_data improper authentication (EUVD-2026-112590) VVulDB Updates2 uur geledenCVE-2026-93904 | dejanmarkovic Social Web Suite Plugin up to 4.1.12 on WordPress exclude_posts sql injection (EUVD-2026-112588) VVulDB Updates2 uur geledenCVE-2026-93855 | brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress Shortcode subscriberid sql injection (EUVD-2026-112587) VVulDB Updates2 uur geledenCVE-2026-109516 | guruteam Bot for Telegram Plugin up to 1.3.0 on WordPress REST Endpoint main bftow_get_user_system_id tgId improper authentication (EUVD-2026-112584) VVulDB Updates6 uur geledenCVE-2026-107100 | Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress information disclosure (WID-SEC-2026-4184) VVulDB Updates6 uur geledenCVE-2026-97255 | WProyal Royal Elementor Addons Plugin up to 1.7.1069 on WordPress authorization (WID-SEC-2026-4184)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4305359/veilig-programmeren/continued-apache-struts2-json-plugin-insecure-deserialisation/