Lucene search
+L

5624 matches found

GithubExploit
GithubExploit
added 2026/01/07 12:45 p.m.214 views

Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server

weblogic getshell 基于各位前辈的脚本优化了一下让代码能在python3中运行 参考链接...

9.8CVSS9AI score0.99448EPSS
SaveExploits70
Cvelist
Cvelist
added 2026/01/07 12:38 p.m.56 views

CVE-2025-47552 WordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37...

9.8CVSS0.00375EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/07 12:38 p.m.7 views

CVE-2025-47552

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37...

9.8CVSS5.2AI score0.00375EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:48 a.m.14 views

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

7.8CVSS7.6AI score0.00352EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:08 a.m.17 views

CVE-2024-2721

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.8CVSS5.2AI score0.00672EPSS
SaveExploits0References1
Veracode
Veracode
added 2026/01/07 6:16 a.m.16 views

Denial-of-Service (DoS)

MessagePack for Java is vulnerable to a Denial-Of-Service DoS . The vulnerability is due to unbounded memory allocation during deserialization, where the library trusts attacker-controlled EXT32 payload length metadata and allocates a byte array of that declared size when ExtensionValue.getData i...

7.5CVSS6.6AI score0.00612EPSS
SaveExploits1References3Affected Software1
GithubExploit
GithubExploit
added 2026/01/06 8:05 p.m.177 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-202...

10CVSS7AI score0.99802EPSS
SaveExploits391
NVD
NVD
added 2026/01/06 5:15 p.m.15 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS0.00344EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/06 4:47 p.m.14 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.2AI score0.00344EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/06 4:47 p.m.9 views

CVE-2025-47553 WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS6.6AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/06 4:47 p.m.37 views

CVE-2025-47553

CVE-2025-47553 corresponds to a Deserialization of Untrusted Data vulnerability in the WordPress plugin DZS Video Gallery, affecting versions up to 12.25. The root cause is PHP object injection via deserialization of untrusted data, enabling an attacker to manipulate serialized data. The CVSS met...

8.8CVSS5.2AI score0.00344EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/06 12:00 a.m.12 views

WordPress plugin DZS Video Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.00344EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/05 2:59 p.m.14 views

GHSA-CW39-R4H6-8J3X MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation

Summary Affected Components: org.msgpack.core.MessageUnpacker.readPayload org.msgpack.core.MessageUnpacker.unpackValue org.msgpack.value.ExtensionValue.getData A denial-of-service vulnerability exists in MessagePack for Java when deserializing .msgpack files containing EXT32 objects with...

7.5CVSS5.9AI score0.00612EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/01/05 2:59 p.m.19 views

MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation

Summary Affected Components: org.msgpack.core.MessageUnpacker.readPayload org.msgpack.core.MessageUnpacker.unpackValue org.msgpack.value.ExtensionValue.getData A denial-of-service vulnerability exists in MessagePack for Java when deserializing .msgpack files containing EXT32 objects with...

7.5CVSS6.6AI score0.00612EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2026/01/05 2:59 p.m.29 views

EUVD-2026-0750

MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation...

7.5CVSS6.1AI score0.00612EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/05 11:17 a.m.11 views

CVE-2025-31047

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

8.8CVSS0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/05 10:26 a.m.37 views

CVE-2025-31047 WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

8.8CVSS0.00351EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/05 10:26 a.m.10 views

EUVD-2026-0878

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

8.8CVSS6.4AI score0.00351EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/05 10:26 a.m.25 views

CVE-2025-31047

CVE-2025-31047: Deserialization of untrusted data in Themify Edmin theme (

8.8CVSS5.2AI score0.00351EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.11 views

WordPress plugin Themify Edmin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.00351EPSS
SaveExploits0References2
Rows per page
Query Builder