Lucene search
+L

7736 matches found

Snyk
Snyk
added 2025/12/11 10:36 p.m.11 views

Deserialization of Untrusted Data

Overview next is a react framework. Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to unsafe deserialization of payloads from HTTP requests to Server Function endpoints. An attacker can cause the server process to enter an infinite loop and hang,...

8.7CVSS6.7AI score0.67291EPSS
SaveExploits13References2
GithubExploit
GithubExploit
added 2025/12/11 7:26 p.m.178 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Exploit - CVE-2025-55182 Author: andrei2308...

10CVSS7.1AI score0.99802EPSS
SaveExploits388
RedhatCVE
RedhatCVE
added 2025/12/11 8:38 a.m.10 views

CVE-2025-66564

A flaw was found in Sigstore Timestamp Authority. This vulnerability allows a denial of service via excessive memory allocation when processing a specially crafted Object Identifier or Content-Type header...

7.5CVSS6AI score0.00443EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/12/11 7:01 a.m.182 views

Exploit for Deserialization of Untrusted Data in Facebook React

CV...

10CVSS7.1AI score0.99802EPSS
SaveExploits388
RedhatCVE
RedhatCVE
added 2025/12/11 12:03 a.m.19 views

CVE-2025-61810

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted...

8.4CVSS7.3AI score0.09336EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/10 7:10 p.m.231 views

Exploit for Deserialization of Untrusted Data in Facebook React

💥 React2Shell-POC 💥 !pythonhttps://img.shields.io/badge/py...

10CVSS6.9AI score0.99802EPSS
SaveExploits402
RedhatCVE
RedhatCVE
added 2025/12/10 2:23 p.m.10 views

CVE-2025-67535

Deserialization of Untrusted Data vulnerability in Flipper Code - WordPress Development Company WP Maps wp-google-map-plugin allows Object Injection.This issue affects WP Maps: from n/a through = 4.8.6...

6.6CVSS5.9AI score0.0036EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/10 8:36 a.m.174 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55...

10CVSS7.1AI score0.99802EPSS
SaveExploits388
GithubExploit
GithubExploit
added 2025/12/10 5:43 a.m.161 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Ultimate - CVE-2025-66478 Scanner...

10CVSS7.7AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
added 2025/12/10 2:07 a.m.166 views

Exploit for Deserialization of Untrusted Data in Facebook React

Introduction A P- bypass version of the WAF scanner has been...

10CVSS7AI score0.99802EPSS
SaveExploits388
EUVD
EUVD
added 2025/12/10 12:30 a.m.14 views

EUVD-2025-202344

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted...

8.4CVSS6.9AI score0.09336EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/10 12:16 a.m.22 views

CVE-2025-61810

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted...

8.4CVSS0.09336EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/10 12:16 a.m.11 views

CVE-2025-61810

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted...

8.4CVSS6.3AI score0.09336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 11:41 p.m.6 views

CVE-2025-61810 ColdFusion | Deserialization of Untrusted Data (CWE-502)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted...

8.4CVSS7.1AI score0.09336EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 11:41 p.m.42 views

CVE-2025-61810 ColdFusion | Deserialization of Untrusted Data (CWE-502)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high privileged attacker could exploit this vulnerability by providing maliciously crafted...

8.4CVSS0.09336EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 11:41 p.m.26 views

CVE-2025-61810

CVE-2025-61810 affects Adobe ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier. The root cause is a Deserialization of Untrusted Data vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation described: an attacker with high privileges can tri...

8.4CVSS7.1AI score0.09336EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2025/12/09 11:39 p.m.224 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — demo This repository provides a demonstratio...

10CVSS8.2AI score0.99802EPSS
SaveExploits388
Atlassian
Atlassian
added 2025/12/09 11:05 p.m.24 views

DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2024-21634 was introduced in 9.12.1 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to take...

7.5CVSS7.8AI score0.00827EPSS
SaveExploits0
Snyk
Snyk
added 2025/12/09 6:43 p.m.6 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in workflow.py. An attacker can execute arbitrary code, cause denial of service, disclose sensitive information, or tamper with data by providing specially crafted serialized input. Details Serializatio...

8.8CVSS7.2AI score0.00643EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/09 6:43 p.m.13 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the Trainer component. An attacker can execute arbitrary code, cause denial of service, disclose sensitive information, or tamper with data by providing specially crafted serialized input. Details...

8.8CVSS7.2AI score0.00643EPSS
SaveExploits0References2
Rows per page
Query Builder