291 matches found
MAL-2025-18307 Malicious code in deserialize-slow-warn-quick-export (npm)
The package deserialize-slow-warn-quick-export was found to contain malicious code...
MAL-2025-14988 Malicious code in async-deserialize-xi-assert-shell (npm)
The package async-deserialize-xi-assert-shell was found to contain malicious code...
MAL-2025-29125 Malicious code in phi-catch-omega-deserialize-cloud (npm)
The package phi-catch-omega-deserialize-cloud was found to contain malicious code...
Exploit for Improper Authentication in Microsoft
Exploit and detect tools for CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability build csc ExchangeCmd.cs csc ExchangeDetect.cs usage ExchangeDetect ExchangeCmd sub commands: exec args exec command arch get remote process architecturefor shellcode shellcode run...
Improper Resource Shutdown or Release
Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the H5Ochunkdeserialize function. An attacker can cause excessive resource consumption by providing specially crafted input that triggers repeated processing within this function. Remediation A f...
The vulnerability of the pgCodeKeeper plugin for the PostgreSQL database, related to deserialization mechanism flaws, allows a hacker to execute arbitrary code.
The vulnerability of the pgCodeKeeper plugin for the PostgreSQL database is related to deficiencies in the deserialization mechanism in the “deserialize” method of the “Utils” class. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted file with t...
DataEase 安全漏洞
DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version 2.10.6 prior to a security vulnerability , the vulnerability...
DataEase 安全漏洞
DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version 2.10.6 prior to the existence of a security vulnerability , th...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the deserialize method, when handling untrusted XML data, which may contain external entity references. Details XXE Injection is a type of attack against an application that parses XML input. XML is...
DEBIAN-CVE-2024-57643
An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
OpenLink Virtuoso-opensource 安全漏洞
OpenLink Virtuoso-opensource is OpenLink Software's is a powerful multi-model database and middleware platform for a variety of application scenarios that require high-performance data processing and complex data model support. A security vulnerability exists in OpenLink Virtuoso-opensource versi...
The vulnerability of the H5S__point_deserialize() function in the H5Spoint.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the H5Spointdeserialize function in the H5Spoint.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the H5HG__cache_heap_deserialize() function in the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the H5HGcacheheapdeserialize function in the HDF5 library is related to buffer overflow in the heap. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Adobe ColdFusion 代码问题漏洞
Adobe ColdFusion is a suite of rapid application development platforms from the American company Audobee Adobe. The platform includes an integrated development environment and a scripting language. A code issue vulnerability exists in Adobe ColdFusion versions 2023.x through prior to 2023.10 and...
PT-2024-41504 · Git · Hdf5
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538113 Crash type: UNKNOWN READ Crash state: H5FL reg malloc H5FL reg calloc H5O cache chk deserialize...
The vulnerability of the `JsonSerializer.DeserializeAsyncEnumerable` method in the System.Text.Json library of the Microsoft.NET software platform and the Microsoft Visual Studio development tools allows a attacker to cause a service failure.
The vulnerability of the JsonSerializer.DeserializeAsyncEnumerable method in the System.Text.Json library of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a...
Wukong_nocode Code Issue Vulnerability
Wukongnocode Wukong no code is Wukong CRM WukongCRM open source a no-code platform development tools. Enterprises can independently and quickly develop a suitable information system for the needs of the enterprise . Wukongnocode 20230807 previous version of the code problem vulnerability , the...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS when using .NET's JsonSerializer.DeserializeAsyncEnumerable function on untrusted input. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...
PT-2024-4734 · Microsoft +8 · Visual Studio +10
Name of the Vulnerable Software and Affected Versions: .NET Core versions prior to 8.x Visual Studio versions prior to 8.x Description: The issue is related to an uncontrolled resource consumption in the JsonSerializer.DeserializeAsyncEnumerable method of the System.Text.Json library in Microsoft...
