Lucene search
+L

29628 matches found

OSV
OSV
added 2025/12/18 9:15 p.m.9 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS5.9AI score0.00519EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2025/12/18 6:32 p.m.170 views

Exploit for Deserialization of Untrusted Data in Facebook React

No d...

10CVSS7AI score0.99802EPSS
SaveExploits389
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/18 4:41 p.m.13 views

Security Bulletin: MANTA Automated Data Lineage for IBM Cloud Pak for Data is vulnerable to Critical Security Vulnerability in React Server Components CVE-2025-55182

Summary MANTA Automated Data Lineage for IBM Cloud Pak for Data is affected by React Server Components CVE-2025-55182. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1...

10CVSS7.9AI score0.99802EPSS
SaveExploits389Affected Software1
EUVD
EUVD
added 2025/12/18 9:30 a.m.12 views

EUVD-2025-204096

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.12 views

EUVD-2025-204098

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through = 1.1.2...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.11 views

EUVD-2025-204097

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through = 1.2.6...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.10 views

EUVD-2025-204084

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through = 7.6.0...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.11 views

EUVD-2025-204100

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through = 1.1.6...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.14 views

EUVD-2025-204067

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.5.4...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.12 views

EUVD-2025-204099

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.9...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.13 views

EUVD-2025-204107

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through = 6.3.4...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.14 views

EUVD-2025-204101

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through = 1.3.5...

9.8CVSS6.5AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.11 views

EUVD-2025-204108

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.3.0...

7.5CVSS6.5AI score0.00346EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.12 views

EUVD-2025-204106

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.3.1...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.12 views

EUVD-2025-204105

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.3.2...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.11 views

EUVD-2025-204201

Deserialization of Untrusted Data vulnerability in BoldThemes DentiCare denticare allows Object Injection.This issue affects DentiCare: from n/a through 1.4.3...

9.8CVSS6.4AI score0.00446EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/12/18 8:19 a.m.188 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight G...

10CVSS7.9AI score0.99802EPSS
SaveExploits389
NVD
NVD
added 2025/12/18 8:16 a.m.14 views

CVE-2025-64266

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.5.4...

8.8CVSS0.00421EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.11 views

CVE-2025-64227

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

9.8CVSS0.00372EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.12 views

CVE-2025-64233

Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects Codiqa: from n/a through 1.2.8...

9.8CVSS0.00372EPSS
SaveExploits0References1
Rows per page
Query Builder