CVE-2025-9906 Arbitrary Code execution in Keras Safe Mode

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .keras model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

Exploit for CVE-2025-49113

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulne...

Exploit for CVE-2025-49113

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulne...

Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

GHSA-PHWJ-FGCH-XVRJ Snipe-IT allows unsafe deserialization

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59713

CVE-2025-59713 affects Snipe-IT before 8.1.18 and is caused by unsafe deserialization. Public references (Red Hat, OSV, CVE listings) and a PoC/exploit repository indicate potential exploitation paths and cross-reference CVE-2025-59712 as well. The vulnerability impacts confidentiality and integr...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

PT-2025-38503

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to an unsafe deserialization issue. Recommendations Update to Snipe-IT version 8.1.18 or later...

PT-2025-38518

Name of the Vulnerable Software and Affected Versions Keras affected versions not specified Description The Model.load model method is susceptible to arbitrary code execution, even when safe mode is enabled. A specially crafted .keras model archive containing a modified config.json file can trigg...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

SUSE-SU-2025:03261-1 Security update for cups

This update for cups fixes the following issues: - CVE-2024-47175: no validation of IPP attributes in ppdCreatePPDFromIPP2 when writing to a temporary PPD file allows for the injection of attacker-controlled data to the resulting PPD bsc1230932. - CVE-2025-58060: no password check when AuthType i...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization because torch.utils.configmodule.loadconfig used in reduce can load malicious pickle files that bypass Picklescan checks and execute arbitrary code during pickle.load...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization through torch.jit.unsupportedtensorops.execWrapper executing a remote pickle after Picklescan fails to flag dangerous content, which allows an attacker to achieve remote code execution by...

Linux Distros Unpatched Vulnerability : CVE-2025-58364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization a...

FreeBSD : cups -- security vulnerabilities (3aee6703-8ff6-11f0-b8da-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3aee6703-8ff6-11f0-b8da-589cfc10a551 advisory. OpenPrinting reports: When the AuthType is set to anything but Basic, if the request contains ...

SUSE CVE-2025-58364

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

DEBIAN-CVE-2025-58364

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...

AZL-67133 CVE-2025-58364 affecting package cups for versions less than 2.3.3op2-10

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups library. This is a remote DoS vulnerability available in local...