WordPress Icegram Express Pro plugin deserialization vulnerability

WordPress Icegram Express Pro plugin is an advanced email marketing automation tool designed for WordPress websites. WordPress Icegram Express Pro plugin suffers from a deserialization vulnerability that stems from unsafe deserialization of serialized data received by the application from users,...

PT-2025-54183

Name of the Vulnerable Software and Affected Versions Anritsu VectorStar affected versions not specified Description A flaw exists in the parsing of CHX files within Anritsu VectorStar, stemming from insufficient validation of user-supplied data. This can lead to the deserialization of untrusted...

PT-2025-53923

Name of the Vulnerable Software and Affected Versions aizuda snail-job versions up to 1.7.0 Description A flaw exists in the FurySerializer.deserialize function within the API component of aizuda snail-job. This issue involves the deserialization of the argsStr argument, potentially allowing for...

snail-job 代码问题漏洞

snail-job is a distributed task scheduling platform open source by aizuda. A code issue vulnerability exists in snail-job version 1.7.0 and earlier, which stems from a misuse of the parameter argsStr in the component API and could lead to a deserialization attack...

PT-2025-53845

Name of the Vulnerable Software and Affected Versions Dromara Sa-Token versions prior to 1.45.0 Description A flaw exists in Dromara Sa-Token up to version 1.44.0 related to deserialization. The issue is located in the ObjectInputStream.readObject function within the...

PT-2025-54184

Name of the Vulnerable Software and Affected Versions Anritsu VectorStar affected versions not specified Description A flaw exists in the parsing of CHX files due to insufficient validation of user-supplied data, leading to deserialization of untrusted data. This can allow remote attackers to...

PT-2025-54181

Name of the Vulnerable Software and Affected Versions Anritsu ShockLine affected versions not specified Description A flaw exists in the parsing of CHX files within Anritsu ShockLine due to insufficient validation of user-supplied data, leading to deserialization of untrusted data. This can allow...

(0Day) Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu ShockLine. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of C...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via using the numpy.f2py.crackfortran.parameval function. An attacker can execute arbitrary code by crafting ...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to using the numpy.f2py.crackfortran.myeval function, which executes a remote pickle file. An attacker ca...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the operator.methodcaller function, which is a built-in Python library function used to execute a remote...

Exploit for Deserialization of Untrusted Data in Givewp

CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injec...

Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef

Summary An unsafe deserialization vulnerability allows an attacker to execute arbitrary code on the host when loading a malicious pickle payload from an untrusted source. Details The numpy.f2py.crackfortran module exposes many functions that call eval on arbitrary strings of values. This is the...

GHSA-R8G5-CGF2-4M4M Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef

Summary An unsafe deserialization vulnerability allows an attacker to execute arbitrary code on the host when loading a malicious pickle payload from an untrusted source. Details The numpy.f2py.crackfortran module exposes many functions that call eval on arbitrary strings of values. This is the...

CVE-2025-15117

A weakness has been identified in Dromara Sa-Token up to 1.44.0. This affects the function ObjectInputStream.readObject of the file SaJdkSerializer.java. Executing manipulation can lead to deserialization. The attack may be launched remotely. This attack is characterized by high complexity. It is...

CVE-2025-67729

LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization vulnerability exists in lmdeploy where torch.load is called without the weightsonly=True parameter when loading model checkpoint files. This allows an attacker to execute...

Exploit for Deserialization of Untrusted Data in Laravel

CVE-2018-15133 - Laravel Framework 5.6.x Vulnerable Lab Thi...

PT-2026-55669

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33 Description The software fails to detect malicious pickle files that utilize the numpy.f2py.crackfortran.param eval function within reduce methods. This flaw allows attackers to bypass security checks by...

PT-2025-53823

Name of the Vulnerable Software and Affected Versions FontForge affected versions not specified Description A flaw exists in FontForge due to insufficient validation of user-supplied data during the parsing of SFD files, leading to deserialization of untrusted data. This can allow a remote attack...

PT-2026-50451

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33 Description An incomplete deny-list fails to block the pydoc.locate and operator.methodcaller functions. This allows remote attackers to bypass security checks by crafting malicious pickle files. The...