https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:51:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-21789 cnvd-2018-21789 https://cve.radiocsirt.org/vuln/cnvd-2018-21789 https://cve.radiocsirt.org/vuln/euvd-2026-177237 EUVD-2026-177237 https://cve.radiocsirt.org/vuln/euvd-2026-177237 https://cve.radiocsirt.org/vuln/fkie_cve-2017-18349 <p>parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.</p> <p>parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-18349 https://cve.radiocsirt.org/vuln/ghsa-xjrr-xv9m-4pw5 <p><strong>Affected:</strong> Maven: com.alibaba:fastjson, Maven: ro.pippo:pippo-fastjson</p> <p>parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.</p> <p><strong>Affected:</strong> Maven: com.alibaba:fastjson, Maven: ro.pippo:pippo-fastjson</p> <p>parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.</p> https://cve.radiocsirt.org/vuln/ghsa-xjrr-xv9m-4pw5 https://cve.radiocsirt.org/vuln/gsd-2017-18349 gsd-2017-18349 https://cve.radiocsirt.org/vuln/gsd-2017-18349