CVE-2025-34153 Hyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCE

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CVE-2025-34153

CVE-2025-34153 affects Hyland OnBase versions prior to 17.0.2.87. The vulnerability arises from insecure deserialization on the .NET Remoting TCP channel, where a listener on port 6031 (TimerServer, Hyland.Core.Timers.dll) deserializes untrusted input via BinaryFormatter, allowing unauthenticated...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-8875link is external N-able N-central Insecure Deserialization Vulnerability CVE-2025-8876link is external N-able N-central Command Injection Vulnerability...

N-able N-Central Insecure Deserialization Vulnerability

N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution...

CVE-2025-55136

ERC aka Emotion Recognition in Conversation through 0.3 has insecure deserialization via a serialized object because jsonpickle is used...

CVE-2025-55136

ERC aka Emotion Recognition in Conversation through 0.3 has insecure deserialization via a serialized object because jsonpickle is used...

PT-2025-32270 · Erc · Erc

Name of the Vulnerable Software and Affected Versions: ERC aka Emotion Recognition in Conversation versions through 0.3 Description: ERC aka Emotion Recognition in Conversation is susceptible to insecure deserialization due to the use of jsonpickle when handling serialized objects. Recommendation...

CVE-2025-55136

ERC (Emotion Recognition in Conversation) up to version 0.3 is affected by insecure deserialization via jsonpickle when handling serialized objects. The vulnerability arises from unsafe deserialization in the serialization path. Public mentions in Red Hat, NVD, OSV, and PT-Security records confir...

CVE-2025-55136

ERC aka Emotion Recognition in Conversation through 0.3 has insecure deserialization via a serialized object because jsonpickle is used...

CVE-2025-55136

ERC aka Emotion Recognition in Conversation through 0.3 has insecure deserialization via a serialized object because jsonpickle is used...

BentoML 1.x < 1.4.8 Insecure Deserialization

According to its banner, the version of BentoML running on the remote host is 1.x 1.4.8. It is, therefore, affected by an Insecure Deserialization vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

BentoML 1.3.4 < 1.4.3 Insecure Deserialization

According to its banner, the version of BentoML running on the remote host is 1.3.4 1.4.3. It is, therefore, affected by an Insecure Deserialization vulnerability through data flow analysis Note that the scanner has not tested for these issues but has instead relied only on the application's...

Exploit for Deserialization of Untrusted Data in Microsoft

🛡️ CVE-2025-53770 SharePoint Vulnerability Scanner A Python-b...

Exploit for SQL Injection in Progress Moveit_Cloud

CVE-2023-34362: Vulnerability Defense Package This repository...

CVE-2025-54366

FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...

ToolShell: Remote Code Execution in Microsoft SharePoint (CVE-2025-53770)

On July 19, 2025, a critical remote code execution RCE vulnerability CVE-2025-53770, also referred to as ToolShell was publicly disclosed, impacting on-premises Microsoft SharePoint Server installations. This vulnerability allows unauthenticated attackers to execute arbitrary code remotely by...

Microsoft SharePoint Remote Code Execution

Microsoft SharePoint Server Subscription Edition 16.0.18526.20508 or 2016 16.0.5513.1001 or 2019 16.0.10417.20037 is affected by a vulnerability that allows an unauthenticated attacker to execute arbitrary code through insecure deserialization. No source data...

CVE-2025-7916

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

Kaltura Video Platform 安全漏洞

Kaltura Video Platform is a video management and distribution platform from Kaltura Individual Developers in the United States. A security vulnerability exists in Kaltura Video Platform versions prior to 11.1.0-2, which stems from insecure deserialization and could lead to remote code execution...