EUVD-2026-124509

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution

PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325 , carries a CVSS v4 score of 9.2 out of a maximum of 10.0. It has been described...

CVE-2026-124704

Telerik UI for WPF, versions prior to 2026.4.1110 , is vulnerable to a deserialization of untrusted data vulnerability (CWE-502). This flaw allows an attacker to perform unauthorized actions within the context of the affected application. While the base severity is high, the attack vector is loca...

CVE-2026-124704 Deserialization of Untrusted Data in Progress Telerik UI for WPF

In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-124701 Deserialization of Untrusted Data in Progress Telerik UI for WinForms

In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allows an attacker to perform unauthorized actions in the context of the affected application...

CVE-2026-124701

Telerik UI for WinForms (versions prior to 2026.4.1111 ) is vulnerable to a deserialization of untrusted data vulnerability (CWE-502). This flaw allows an attacker to perform unauthorized actions within the context of the affected application. No specific exploit details or remediation steps are ...

CVE-2024-24590

CVE-2024-24590 Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with. Usage 1. paste the credentials given and run...

CVE-2024-11394

CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious reformer trax...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...

CVE-2020-7961-payloads

CVE-2020-7961-payloads Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services JSONWS Step 1 Write Your payload in LifExp.java Step 2 Compile it with javac Step 3 make your log server Maybe you want to use...

CTF_Django_CVE-2022-34265

CTFCVE-2022-34265 Description An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a know...

CVE-2026-45659

CVE-2026-45659 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized...

CVE-2024-29847

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-29847 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ Usage...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CyberDefenders – OpenWire Lab Network Forensics | Wireshar...

CVE-2021-25641-Proof-of-Concept

The 0xDABB of Doom - CVE-2021-25641-Proof-of-Concept Apache/Alibaba Dubbo = 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions = 2.7.6 With Different Gadgets Covered in-depth in the article "The 0xDABB of Doom", published on the Checkmarx blog...

CVE-2020-35488

I have found a vulnerability in product: nxlog-ce2.10.2150. I have tested my PoC only on Linux Debian 10 and Windows Windows Server 2016. 1 Description : Scope : NXLOG Community Edition 2.10.2150 Bug Type : CWE-502, Deserialization of Untrusted Data https://cwe.mitre.org/data/definitions/502.html...

Security Bulletin: IBM ApplinX is vulnerable to a vulnerability due to use of Google Guava (CVE-2026-102554)

Summary IBM ApplinX is vulnerable to a vulnerability due to use of a third-party library: Google Guava is vulnerable to deserialization of untrusted data and allocation of resources without limits vulnerabilities CVE-2026-102554. The affected versions have been updated within IBM ApplinX in order...

CVE-2024-24926

CVE-2024-24926 CVE-2024-24926 Vulnerability affects the Brooklyn theme for WordPress Description: The CVE-2024-24926 vulnerability affects the Brooklyn theme for WordPress versions up to 4.9.7.6 and is related to deserialization of untrusted data CWE-502. This allows an attacker to send malicious...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious...