Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/12/19 2:09 p.m.•18 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS7.2AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/18 9:15 p.m.•23 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS0.00531EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/18 9:15 p.m.•14 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS5.9AI score0.00531EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/12/18 12:00 a.m.•6 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

6.8AI score0.00531EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•1 views

CVE-2025-63950: Deserialization of Untrusted Data

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

7.5CVSS6AI score0.00531EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•14 views

twittodon 安全漏洞

twittodon is a website page for to3k individual developers. A security vulnerability exists in twittodon b1c58a7d1dc664b38deb486ca290779621342c0b, which stems from improper deserialization of the obj parameter in the download.php script, which could lead to a denial of service attack...

7.5CVSS6.6AI score0.00531EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/12/18 12:00 a.m.•44 views

CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

0.00531EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•14 views

PT-2025-52346

Name of the Vulnerable Software and Affected Versions to3k Twittodon versions prior to commit b1c58a7d1dc664b38deb486ca290779621342c0b Description An insecure deserialization issue exists in the download.php script of the to3k Twittodon application. The obj parameter accepts base64-encoded data...

7.5CVSS6.8AI score0.00531EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/18 12:00 a.m.•29 views

CVE-2025-63950

The to3k Twittodon application is vulnerable to an insecure deserialization flaw in the download.php script (versions prior to commit b1c58a7d1dc664b38deb486ca290779621342c0b). The obj parameter accepts base64-encoded data which is passed directly to the unserialize() function without proper vali...

6.8AI score0.00531EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder