11608 matches found
EUVD-2026-102053
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...
CVE-2026-109686: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...
CVE-2026-110874: Deserialization of Untrusted Data
Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize in functions.lib.php, which calls unserialize without class restrictions when jsondecode fails. Attackers able to write stored extrafields, export configurations or blocked log entries can plant serialized...
CVE-2026-110761
ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...
CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import
ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...
EUVD-2026-101561
ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...
CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import
ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary objects via crafted Test archives. Attackers can inject a malicious tstsequence sequence attribute that is passed to...
CVE-2026-110761
The ILIAS platform (versions before 9.24 , 10.12 , and 11.5 ) is vulnerable to a PHP object injection vulnerability during the Test results import process. Authenticated users with permissions to create or import tests can exploit this by providing a crafted Test archive . The vulnerability occur...
CVE-2026-97278
Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...
CVE-2026-108291
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...
CVE-2026-106599
Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...
CVE-2026-108291
The itthinx Affiliates WordPress plugin, versions up to and including 7.0.1 , is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to perform Object Injection , which can lead to significant impacts on confidentiality...
EUVD-2026-101017
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...
CVE-2026-108291 WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1...
EUVD-2026-101010
Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...
CVE-2026-106599 WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3...
CVE-2026-106599
The SureCart WordPress plugin (versions up to and including 4.9.3 ) is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . An attacker could potentially exploit this to perform object injection, leading to high confidentiality, integrity, and availability i...
CVE-2026-97278 WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...
CVE-2026-97278 WordPress Polylang plugin <= 3.8.9 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9...