61 matches found
ClearML-CVE-2024-24590-RCE
Clearml-CVE-2024-24590 CVE-2024-24590 是一种可在服务器端存在不当反序列化时被利用的漏洞，此处指 Clearml。 当攻击者创建恶意的 Pickle 文件时，他们可以在反序列化该 Pickle 文件的受害者系统上执行任意代码，并可进一步升级为反弹 Shell，从而实现远程命令执行。 别忘了安装 clearml 库 root@kitploit: python -m venv .g source .g/bin/activate/ pip install clearml...
CVE-2026-63701
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
CVE-2026-63701
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
CVE-2026-63701
Dell Wyse Management Suite versions prior to 2605.0.2 contain an Improper Deserialization of Untrusted Data flaw exploitable by a low-privileged local attacker to achieve privilege escalation. NVD rates it HIGH (CVSS 7.8). No active exploitation reported. Upgrade to 2605.0.2 via Dell DSA-2026-329.
PT-2026-72044
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
PT-2026-61990
Name of the Vulnerable Software and Affected Versions NVIDIA Transformers4Rec affected versions not specified Description Improper deserialization of untrusted data occurs within the load model trainer states from checkpoint function. This flaw allows an attacker to potentially execute arbitrary...
CVE-2026-24237
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-24221
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure...
CVE-2026-24237
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-24237
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
EUVD-2026-33984
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure...
NVIDIA NVTabular 代码问题漏洞
NVIDIA NVTabular is a component within the deep learning recommendation system framework developed by NVIDIA Corporation. NVIDIA NVTabular has code-related vulnerabilities; these vulnerabilities stem from improper deserialization of untrusted data, which may lead to code execution, data tampering...
CVE-2026-24162
NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2020-10655
The Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouse API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The...
CVE-2020-10656
The Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.9.1 contains a vulnerability in the ITM application server's WriteWindowMouseWithChunksV2 API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. Th...
twittodon 安全漏洞
twittodon is a website page for to3k individual developers. A security vulnerability exists in twittodon b1c58a7d1dc664b38deb486ca290779621342c0b, which stems from improper deserialization of the obj parameter in the download.php script, which could lead to a denial of service attack...
CSLA .NET 代码问题漏洞
CSLA .NET is an open source software development framework from Marimer LLC. It helps users build reusable and maintainable object-oriented business layers for applications. A code issue vulnerability exists in CSLA .NET 5.5.4 and prior versions that stems from improper deserialization and could...
EUVD-2020-3102
Malware in sbrugna...