EUVD-2025-16787

Malicious code in bioql PyPI...

EUVD-2023-45175

Malicious code in bioql PyPI...

EUVD-2025-24367

Malicious code in bioql PyPI...

EUVD-2022-6622

Malicious code in bioql PyPI...

EUVD-2024-25159

Malicious code in bioql PyPI...

EUVD-2022-52693

Malicious code in bioql PyPI...

EUVD-2025-9138

Malicious code in bioql PyPI...

EUVD-2025-24609

Malicious code in bioql PyPI...

EUVD-2025-27816

Malicious code in bioql PyPI...

EUVD-2025-12229

Malicious code in bioql PyPI...

EUVD-2023-2485

Malicious code in bioql PyPI...

CVE-2025-58384

CVE-2025-58384 affects DOXENSE WATCHDOC prior to version 6.1.1.5332. The issue is Deserialization of Untrusted Data via the .NET Remoting library used in the Watchdoc administration interface, enabling remote code execution. Impact is high (remote code execution with network access and no user in...

Deserialization of Untrusted Data

Overview net.sf.jasperreports:jasperreports is an open source reporting engine for Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data when processing .jasper files from untrusted sources. An attacker can achieve remote execution of arbitrary code by...

CVE-2025-54897

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2025-58782

Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accept JNDI URIs for JCR lookup from...

CVE-2025-9365

Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code...

Sitecore Experience Manager 安全漏洞

Sitecore Experience Manager XM is a management software from Sitecore, Denmark. A security vulnerability exists in Sitecore Experience Manager versions 9.0 to 9.3 and 10.0 to 10.4 and Sitecore Experience Platform versions 9.0 to 9.3 and 10.0 to 10.4, which stems from deserializing untrusted data...

PT-2025-35603

Name of the Vulnerable Software and Affected Versions Digilent DASYLab affected versions not specified Description Digilent DASYLab is susceptible to a deserialization of untrusted data issue that could lead to arbitrary code execution. An attacker can exploit this by tricking a user into opening...

CVE-2025-6507 Deserialization of Untrusted Data in h2oai/h2o-3

A vulnerability in the h2oai/h2o-3 repository allows attackers to exploit deserialization of untrusted data, potentially leading to arbitrary code execution and reading of system files. This issue affects the latest master branch version 3.47.0.99999. The vulnerability arises from the ability to...

CVE-2025-53584 WordPress WP Ticket Customer Service Software & Support Ticket System Plugin <= 6.0.2 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket System wp-ticket allows Object Injection.This issue affects WP Ticket Customer Service Software & Support Ticket System: from n/a through = 6.0.2...