2394 matches found
PT-2026-39164
Insecure Deserialization in File Cache - Severity: High - CWE: CWE-502 - Location: system/src/Grav/Framework/Cache/Adapter/FileCache.php - Sink: unserialize$value, 'allowed classes' = true Affected versions - Affected: = 1.7.44 and true allows object instantiation and does not constrain classes...
📄 LangChain Core Insecure Deserialization
LangChain Core versions prior to 1.2.5 and 0.3.81 suffer from a deserialization vulnerability that allows for server-side template injection that can lead to remote code execution. Exploit Title: LangChain Core - SSTI/RCE Date: 2025-12-29 Exploit Author: Mohammed Idrees Banyamer Author Country:...
Insecure Deserialization
org.apache.camel, camel-jms is vulnerable to insecure deserialization. The vulnerability is due to unsafe deserialization of JMS ObjectMessage payloads without applying input filters or class restrictions, which allows an attacker to send a crafted message and achieve remote code execution if a...
Apache MINA Insecure Deserialization
The Apache MINA project has released versions 2.2.7 and 2.1.12 to address multiple deserialization vulnerabilities...
PHP code mixing issue vulnerabilities
Mix PHP is Mix PHP open source a PHP command-line mode development framework that supports seamless multi-server ecosystem switching. Mix PHP version 2.x to 2.2.17 version of the code problem vulnerability , the vulnerability stems from insecure deserialization , sync-invoke TCP server receives t...
CVE-2025-60889
Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts...
Vulnerabilities handled in Apache Camel
The Apache Software Foundation has identified vulnerabilities in Apache Camel. These vulnerabilities exist in various components of Apache Camel. The issues include insecure deserialization, insufficient filtering of email headers, incorrect authentication path matching, and improper processing o...
CVE-2025-60887
An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...
Duplicate Advisory: Grav has Insecure Deserialization in File Cache
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwfr-jfjf-92vv. This link is maintained to preserve external references. Original Description A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1. Affected by this vulnerability is the function...
GHSA-J7RW-325J-2RMX Duplicate Advisory: Grav has Insecure Deserialization in File Cache
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gwfr-jfjf-92vv. This link is maintained to preserve external references. Original Description A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1. Affected by this vulnerability is the function...
CVE-2025-60887
An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...
CVE-2025-60889
The StellarGroup HPX high-performance parallel runtime system, specifically version 1.11.0 , is vulnerable to insecure deserialization of untrusted input. If successfully exploited under certain conditions, an attacker could achieve arbitrary code execution or other unspecified impacts. Exploitat...
EUVD-2025-209582
An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...
PT-2026-35743
An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...
CVE-2025-60889
Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts...
CVE-2025-60887
An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...
EUVD-2025-209583
Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts...
CVE-2025-60887
An issue was discovered in Cista v0.15 and below. Insecure deserialization of untrusted input under certain conditions may lead to leaking of stack/heap addresses which may be used to bypass ASLR. Classes with pointer-like mechanics under the cista::raw namespace are prone to reference tampering,...
PT-2026-35744
Name of the Vulnerable Software and Affected Versions StellarGroup HPX version 1.11.0 Description Insecure deserialization of untrusted input under certain conditions may allow attackers to execute arbitrary code or cause other unspecified impacts. Deserialization is the process of converting dat...
