37122 matches found
CVE-2026-12650: Deserialization of Untrusted Data
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-87089
Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM versions prior to 2026.2 Description A deserialization of untrusted data issue allows a remote authenticated attacker to execute arbitrary code on the server. Deserialization is the process of converting a data stream...
CVE-2026-77092: Deserialization of Untrusted Data
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...
CVE-2026-12651: Deserialization of Untrusted Data
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
ROS-20260908-73-0012
The vulnerability in Java-11-openjdk is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
PT-2026-88167
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to submit configuration updates to specify the values of transient fields that will be deserialized, the impact depending on how those fields are used...
ROS-20260908-73-0011
The vulnerability in Java 1.8.0-openjdk is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
RHEL 10 : valkey (RHSA-2026:64796)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64796 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists,...
ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
ALSA-2026:64807 Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
Linux Distros Unpatched Vulnerability : CVE-2026-86317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cp...
RHEL 9 : valkey (RHSA-2026:64807)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64807 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, se...
CVE-2026-65772: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
PT-2026-88067
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-81385: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
Important: valkey security, bug fix, and enhancement update
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...
CVE-2026-12648: Deserialization of Untrusted Data
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-87665
Name of the Vulnerable Software and Affected Versions Windows IP Address Management IPAM Service affected versions not specified Description Deserialization of untrusted data in the Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...
CVE-2018-14667_Lab_POC
CVE-2018-14667-Lab POC para la explotación de CVE-2018-14667 REQUISITOS PREVIOS App de demostración desde: http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA desde el archivo de descargas de JBOSS:...
About Remote Code Execution - TeamCity (CVE-2026-63077) vulnerability
About Remote Code Execution - TeamCity CVE-2026-63077 vulnerability. TeamCity is a proprietary solution developed by JetBrains for automating software build, testing, and deployment processes. TeamCity uses a central server to coordinate builds and separate build agents to execute them. An agent...