MAL-2025-18294 Malicious code in deploy-benchmark-fork-bundle-dog (npm)

The package deploy-benchmark-fork-bundle-dog was found to contain malicious code...

MAL-2025-18293 Malicious code in deploy-assert-debug-short-reject (npm)

The package deploy-assert-debug-short-reject was found to contain malicious code...

MAL-2025-7060 Malicious code in @amber-team/log-uptime-deploy (npm)

The package @amber-team/log-uptime-deploy was found to contain malicious code...

MAL-2025-28218 Malicious code in omicron-deploy-index-bad-sun (npm)

The package omicron-deploy-index-bad-sun was found to contain malicious code...

MAL-2025-32887 Malicious code in sed-deploy-shell-cat-grid (npm)

The package sed-deploy-shell-cat-grid was found to contain malicious code...

Malicious code in blaast-deploy (npm)

The package blaast-deploy was found to contain malicious code...

MAL-2025-33442 Malicious code in small-private-integer-array-deploy (npm)

The package small-private-integer-array-deploy was found to contain malicious code...

MAL-2025-13962 Malicious code in abstract-permission-root-kappa-deploy (npm)

The package abstract-permission-root-kappa-deploy was found to contain malicious code...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

GHSA-X6GV-2RVH-QMP6 m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

Summary The steam-workshop-deploy github action does not exclude the .git directory when packaging content for deployment and provides no built-in way to do so. If a .git folder exists in the target directory e.g., due to a local Git repo, custom project structure, or via the actions/checkout...

CVE-2025-8916

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in Web Deploy. The vulnerability in Web Deploy results from the deserialization of untrusted data. This issue can be exploited by an authorized attacker, enabling them to remotely execute code on the affected system. Web Deploy:...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53772 Web Deploy Remote Code Execution Vulnerability

...

CVE-2025-53772

This CVE affects Microsoft Web Deploy (deserialization of untrusted data) enabling Remote Code Execution over the network. Affected component is Web Deploy’s deserialization pathway, with evidence of in-the-wild and PoC exploits on public GitHub (e.g., stand-alone and IIS WebDeploy PoCs). The vul...

CVE-2025-53772 Web Deploy Remote Code Execution Vulnerability

...

Web Deploy Remote Code Execution Vulnerability

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

CVE-2025-53772: Deserialization of Untrusted Data

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

KLA86588 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Web Deploy can be exploited remotely to execute arbitrary code. 2...