CVE-2021-33898

Invoice Ninja before 4.4.0 has an unsafe unserialize() call in app/Ninja/Repositories/AccountRepository.php which can let an attacker deserialize arbitrary PHP classes. In certain contexts this may lead to remote code execution. The attack input is tied to http://www.geoplugin.net (plain HTTP), a...

RUSTSEC-2021-0070 VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

VecStorage Deserialize Allows Violation of Length Invariant

The Deserialize implementation for VecStorage did not maintain the invariant that the number of elements must equal nrows ncols. Deserialization of specially crafted inputs could allow memory access beyond allocation of the vector. This flaw was introduced in v0.11.0 086e6e due to the addition of...

PT-2021-21998

Name of the Vulnerable Software and Affected Versions: nalgebra crate versions prior to 0.27.1 Description: The issue allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count. This is due to the Deserialize...

PT-2021-24264

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: An issue in the messagepack-rs crate allows it to read from uninitialized memory locations during deserialization. This affects functions such as deserialize binary, deserialize string,...

PT-2021-24266

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: The issue in the messagepack-rs crate allows functions such as deserialize binary, deserialize string, deserialize extension others, and deserialize string primitive to read from...

PT-2021-24265

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: An issue was discovered in the messagepack-rs crate where certain functions may read from uninitialized memory locations, leading to undefined behavior. The affected functions include...

PT-2021-28015

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A crash occurs due to an unknown read issue. The crash state involves the H5HG cache heap deserialize, H5C load entry, and H5C protect functions. Recommendations At the moment, there is no...

matio:matio_fuzzer: Crash in H5HG__cache_heap_deserialize

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6435364057251840 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

RUSTSEC-2021-0089 Optional `Deserialize` implementations lacking validation

When activating the non-default feature serialize, most structs implement serde::Deserialize without sufficient validation. This allows breaking invariants in safe code, leading to: Undefined behavior in asstring methods which use std::str::fromutf8unchecked internally. Panics due to failed...

Remote code execution

OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:ActivityDataGrid parameter. The PHP object injection exploit chain can leverage an destruct magic metho...

PT-2021-28005

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5HL fl deserialize function, which is called by H5HL cache datablock deserialize and H5C load entry. Recommendatio...

PT-2021-27944

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the H5O cont decode function, which is called by H5O chunk deserialize and H5O cache deserialize. Recommendations At th...

CLSA-2020-1605798462 Fix of 227 CVE

Fix bug 69720: Null pointer dereference in phargetfpoffset - Fix bug 70728: Type Confusion Vulnerability in PHPtoXMLRPCworker - Fix bug 70661: Use After Free Vulnerability in WDDX Packet Deserialization - Fix bug 70741: Session WDDX Packet Deserialization Type Confusion Vulnerability - Fix bug...

CVE-2020-25258

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It uses ASP.NET BinaryFormatter.Deserialize in a manner that allows attackers to transmit and execute bytecode in SOAP messages...

Hyland OnBase Bytecode Execution Vulnerability

Hyland OnBase is an enterprise information platform for managing your content, processes and cases. Hyland OnBase has a bytecode execution vulnerability that stems from a problem with the way OnBase uses ASP.NET BinaryFormatter.Deserialize, which can be exploited by an attacker to transmit and...

Denial Of Service (DoS)

serialize-to-js is vulnerable to denial of service DoS. The vulnerability exists as the unvalidated user input could cause an infinite loop in the deserialize function...

PT-2020-21878

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description The issue is related to a crash that occurs due to a segmentation fault on an unknown address. Technical details about the crash include the involvement of specific function calls: H5O chunk...

skia:image_filter_deserialize_width: Crash in SkReader32::readInt

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5752574451122176 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60608103762...

Kentico CMS 12.0.14 Remote Command Execution Exploit

This Metasploit module exploits a vulnerability in the Kentico CMS platform versions 12.0.14 and earlier. Remote command execution is possible via unauthenticated XML requests to the Staging Service SyncServer.asmx interface ProcessSynchronizationTaskData method stagingTaskData parameter. XML inp...