Posted by Daniel Owens via Fulldisclosure on Oct 28Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation (JSON) deserialisers available today, like in "Struts2 and Related Framework Array/Collection DoS" (26 October 2025) and "JSON Deserialiser Unconstrained Resource Consumption Quick... Weiterlesen: Continued Apache Struts2 JSON Plugin Insecure Deserialisation
Intelligence View
⚡ tsecurity.de Intelligence
Continued Apache Struts2 JSON Plugin Insecure Deserialisation
Posted by Daniel Owens via Fulldisclosure on Oct 28Summary Thus far we have written extensively about the rampant number of insecure JavaScript Object Notation…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
25 Kaynaklar
CVE-2023-54227 | Linux Kernel up to 6.5.4 /mnt nr_hw_queues memory leak (Nessus ID 319348 / WID-SEC-2025-2941)
24 diğer kaynaklar
IIT Security Newsvor 2 Std.Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers VVulDB Updatesvor 6 Std.CVE-2023-54196 | Linux Kernel up to 5.15.112/6.1.80/6.3.3 ntfs3 null pointer dereference VVulDB Updatesvor 6 Std.CVE-2023-54192 | Linux Kernel up to 6.1.28/6.2.15/6.3.2 f2fs __replace_atomic_write_block null pointer dereference (Nessus ID 281732) LLinux, GNU/Linux, free soft…vor 11 Std.Linux Kernel Developers Considering Removal Of KGDB Debugging Functionality VVulDB Updatesvor 8 Std.CVE-2023-53696 | Linux Kernel up to 5.15.106/6.1.23/6.2.10 scsi qla2x00_probe_one initialization (Nessus ID 284764 / WID-SEC-2025-2394) VVulDB Updatesvor 8 Std.CVE-2023-53695 | Linux Kernel up to 6.2.2 UDF File Parser privilege escalation (Nessus ID 276910 / WID-SEC-2025-2394)
+18
12 Kaynaklar
CVE-2026-116839 | Ubiquiti airMAX M up to 6.3.25 cross-site request forgery (EUVD-2026-110579)
11 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2026-96666 | Schema App Structured Data Plugin up to 2.3.2 on WordPress Remove Microdata Output Filter cross site scripting (EUVD-2026-112589) VVulDB Updatesvor 2 Std.CVE-2026-96669 | wpscripts Food Store Plugin up to 1.5.5 on WordPress Cookie service_type/type cross site scripting (EUVD-2026-112586) VVulDB Updatesvor 2 Std.CVE-2026-96741 | mlfactory DSGVO All in one for WP Plugin up to 5.0 on WordPress Comment Content cross site scripting (EUVD-2026-112585) VVulDB Updatesvor 2 Std.CVE-2026-66092 | Apereo openEQUELLA up to 2026.1 Pre-Login Notice /api/preloginnotice cross site scripting (EUVD-2026-112568) VVulDB Updatesvor 2 Std.CVE-2026-113409 | Canva Ortto Plugin up to 1.0.24 cross site scripting (EUVD-2026-112571) VVulDB Updatesvor 2 Std.CVE-2026-16889 | Apereo openEQUELLA up to 2026.0 Image Upload Endpoint image name cross site scripting (EUVD-2026-112563)
+5
7 Kaynaklar
CVE-2026-93757 | Wild Apricot Login Plugin up to 1.0.18 on WordPress SSO Authentication Module.php syncWaContact improper authentication (EUVD-2026-112591)
6 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2026-96228 | sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress Login final_login_ajax_action sslcare_login_phone/cap_data improper authentication (EUVD-2026-112590) VVulDB Updatesvor 2 Std.CVE-2026-93904 | dejanmarkovic Social Web Suite Plugin up to 4.1.12 on WordPress exclude_posts sql injection (EUVD-2026-112588) VVulDB Updatesvor 2 Std.CVE-2026-93855 | brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress Shortcode subscriberid sql injection (EUVD-2026-112587) VVulDB Updatesvor 2 Std.CVE-2026-109516 | guruteam Bot for Telegram Plugin up to 1.3.0 on WordPress REST Endpoint main bftow_get_user_system_id tgId improper authentication (EUVD-2026-112584) VVulDB Updatesvor 6 Std.CVE-2026-107100 | Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress information disclosure (WID-SEC-2026-4184) VVulDB Updatesvor 6 Std.CVE-2026-97255 | WProyal Royal Elementor Addons Plugin up to 1.7.1069 on WordPress authorization (WID-SEC-2026-4184)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4305359/guevenli-programlama/continued-apache-struts2-json-plugin-insecure-deserialisation/