ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

CVE-2026-126994

A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolvetypekwargs of the file braindecode/models/util.py of the component Model Config Deserialization. Such manipulation of the argument Activation leads to use of externally-controlled input to select classes or...

CVE-2026-126994

The braindecode library (up to version 1.8.1 ) contains a vulnerability in the Model Config Deserialization component. Specifically, the resolve_type_kwargs function in braindecode/models/util.py allows for the manipulation of the Activation argument, leading to the use of externally-controlled i...

CVE-2026-126994 braindecode Model Config Deserialization util.py resolve_type_kwargs externally-controlled input to select classes or code

A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolvetypekwargs of the file braindecode/models/util.py of the component Model Config Deserialization. Such manipulation of the argument Activation leads to use of externally-controlled input to select classes or...

EUVD-2026-124374

A vulnerability has been found in braindecode up to 1.8.1. Affected is the function resolvetypekwargs of the file braindecode/models/util.py of the component Model Config Deserialization. Such manipulation of the argument Activation leads to use of externally-controlled input to select classes or...

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325 , carries a CVSS v4 score of 9.2 out of a maximum of 10.0. It has been described...

CVE-2026-124704

In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-124701

In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-124704

Telerik UI for WPF, versions prior to 2026.4.1110 , is vulnerable to a deserialization of untrusted data vulnerability (CWE-502). This flaw allows an attacker to perform unauthorized actions within the context of the affected application. While the base severity is high, the attack vector is loca...

CVE-2026-124704 Deserialization of Untrusted Data in Progress Telerik UI for WPF

In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

EUVD-2026-124345

In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-124701 Deserialization of Untrusted Data in Progress Telerik UI for WinForms

In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-124701

Telerik UI for WinForms (versions prior to 2026.4.1111 ) is vulnerable to a deserialization of untrusted data vulnerability (CWE-502). This flaw allows an attacker to perform unauthorized actions within the context of the affected application. No specific exploit details or remediation steps are ...

EUVD-2026-124340

In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-106140

In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editi...

CVE-2026-106140 Deserialization of Untrusted Data in Telerik Reporting Report Designers

In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editi...

EUVD-2026-124334

In Progress® Telerik® Reporting prior to version 20.3.26.1110, a deserialization of untrusted data vulnerability in the .NET Framework report designers allows a local attacker with low privileges to execute arbitrary code in the context of the designer process when the user performs certain editi...

CVE-2026-106140

Progress Telerik Reporting prior to version 20.3.26.1110 contains a deserialization of untrusted data vulnerability within the .NET Framework report designers. A local attacker with low privileges can exploit this flaw to execute arbitrary code in the context of the designer process when a user p...

Exploit for Deserialization of Untrusted Data in Givewp

CVE-2024-5932: GiveWP Unauthenticated Remote Code Execution P...

CVE-2021-3129_exploit

CVE-2021-3129exploit Exploit for CVE-2021-3129 Lab setup: $ git clone https://github.com/laravel/laravel.git $ cd laravel $ git checkout e849812 $ composer install $ composer require facade/ignition==2.5.1 $ php artisan serve Usage: $ git clone https://github.com/nth347/CVE-2021-3129exploit.git $...