{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:32.532Z","products":["chanjet"],"actNowTotal":0,"results":[{"query":"chanjet","matched":1,"actNow":0,"events":[{"id":"early-cve-2023-7334","url":"https://securitythreatpulse.com/events/early-cve-2023-7334","title":"Changjetong Information Technology T+: attackers can run their own code","verdict":"watch","verdictReason":"Attack attempts are confirmed, with no confirmed exploitation yet.","tier":null,"rankScore":1,"rankWhy":["The first report is 20 days old."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"none"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2023-7334"],"vendor":"Changjetong Information Technology Co., Ltd.","product":"T+","affectedProducts":[{"kind":"direct","slug":"chanjet/t","vendor":"Chanjet","product":"T+","evidence":["cna","cpe"],"vendorKey":"chanjet","productKey":"t"}],"category":{"id":"other","label":"Other software","why":"Software we have not put in a category yet. Your IT team or provider will know whether you run it.","doThis":"Find out if you use it. If you do, apply the vendor's fix."},"summary":"Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind._PriorityLevel,App_Code.ashx?method=GetStoreWarehouseByStore with a malicious JSON body that leverages deserialization of attacker-controlled .NET types to…","cvss":9.3,"epss":0.01098,"exploitMaturity":"poc","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-10-22T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-10-22T00:00:00.000Z"}]}]}