5624 matches found
Deserialization of Untrusted Data
Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via using the numpy.f2py.crackfortran.parameval function. An attacker can execute arbitrary code by crafting ...
Exploit for Deserialization of Untrusted Data in Givewp
CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injec...
Exploit for Deserialization of Untrusted Data in Laravel
CVE-2018-15133 - Laravel Framework 5.6.x Vulnerable Lab Thi...
CVE-2025-15117
CVE-2025-15117 affects Dromara Sa-Token up to 1.44.0. The flaw is in SaJdkSerializer.java, specifically ObjectInputStream.readObject, enabling a deserialization attack. The description notes remote-launch potential with high attack complexity and difficult exploitability. Multiple sources corrobo...
Exploit for Deserialization of Untrusted Data in Facebook React
No d...
Exploit for Deserialization of Untrusted Data in Facebook React
No d...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Scanner ā CVE-2025-55182 š Ferramenta educacion...
Exploit for Deserialization of Untrusted Data in Microsoft
No d...
CVE-2025-68038
Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object Injection.This issue affects Icegram Express Pro: from n/a through 5.9.14...
Apache HugeGraph-Server Deserialization Vulnerability
Apache HugeGraph-Server is a server-side process for graph databases from the Apache Foundation. Apache HugeGraph-Server suffers from a deserialization vulnerability that stems from insecure Hessian deserialization in the PD store, which can be exploited by an attacker to cause remote code...
CVE-2025-13711
Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2025-13708
Tencent NeuralNLP-NeuralClassifier loadcheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent NeuralNLP-NeuralClassifier. User interaction is required to exploit th...
Exploit for Deserialization of Untrusted Data in Facebook React
š CVE-2025-55182-poc - Simple Tool for Enhanced Cybersecurity...
Exploit for Deserialization of Untrusted Data in Facebook React
š”ļø Blackash-CVE-2025-55182 - Simple Tool for CVE-2025-55182 Pr...
CVE-2025-68665
A flaw was found in LangChain. A remote attacker could exploit a serialization injection vulnerability in the toJSON method. This occurs because the method fails to properly escape objects containing 'lc' keys during serialization of free-form data. When user-controlled data includes this key...
CVE-2025-14922
A flaw was found in Hugging Face Diffusers. This vulnerability allows remote attackers to execute arbitrary code on affected installations. Exploitation requires user interaction, where a target must visit a malicious page or open a malicious file. The issue stems from improper validation of...
Exploit for Deserialization of Untrusted Data in Facebook React
This is setup...
EUVD-2025-205272
Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object Injection.This issue affects Icegram Express Pro: from n/a through = 5.9.11...