CVE-2017-9424

IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSON deserialization.

• CWE-502

• http://breeze.github.io/doc-net/release-notes.htmlRelease Notes, Vendor Advisory
• https://www.blackhat.com/us-17/briefings.html#friday-the-13th-json-attacksTechnical Description
• http://breeze.github.io/doc-net/release-notes.htmlRelease Notes, Vendor Advisory
• https://www.blackhat.com/us-17/briefings.html#friday-the-13th-json-attacksTechnical Description

Published

Jun 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9417Broadcom BCM43xx Wi-Fi chips allow remote attackers to execu…
• CVE-2017-9418SQL injection vulnerability in the WP-Testimonials plugin 3.…
• CVE-2017-9419Cross-site scripting (XSS) vulnerability in the Webhammer WP…
• CVE-2017-9420Cross site scripting (XSS) vulnerability in the Spiffy Calen…
• CVE-2017-9421Authentication Bypass vulnerability in Accellion kiteworks b…
• CVE-2017-9422Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-9425The Facetag extension 0.0.3 for Piwigo allows XSS via the na…
• CVE-2017-9426ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL …
• CVE-2017-9427SQL injection vulnerability in BigTree CMS through 4.2.18 al…
• CVE-2017-9428A directory traversal vulnerability exists in core\admin\aja…
• CVE-2017-9429SQL injection vulnerability in the Event List plugin 0.7.8 f…
• CVE-2017-9430Stack-based buffer overflow in dnstracer through 1.9 allows …