CVE-2025-41700 CODESYS Development System - Deserialization of Untrusted Data

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the HttpServletRpcEndpoint endpoint. of the LiteRpc-Serializer component. An attacker can enumerate valid values for LiteRpc-Klass and LiteRpc-Method headers without guessing, guaranteeing that the...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the HttpServletRpcEndpoint endpoint. of the LiteRpc-Serializer component. An attacker can enumerate valid values for LiteRpc-Klass and LiteRpc-Method headers without guessing, guaranteeing that the...

Security Bulletin: Due to use of Apache Jena SDB, IBM Jazz Reporting Service is affected by a JDBC Deserialisation attack.

Summary Apache Jena SDB is used internally by IBM Jazz Reporting Service CVE-2022-45136. Vulnerability Details CVEID:CVE-2022-45136 DESCRIPTION: Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the...

PT-2025-48590

Name of the Vulnerable Software and Affected Versions Tencent MimicMotion affected versions not specified Description A flaw exists in the create pipeline function of Tencent MimicMotion that allows remote attackers to execute arbitrary code. The issue stems from insufficient validation of...

PT-2025-48586

Name of the Vulnerable Software and Affected Versions Tencent TFace affected versions not specified Description A flaw exists within the eval endpoint of Tencent TFace that allows remote attackers to execute arbitrary code. The issue stems from insufficient validation of user-supplied data, leadi...

Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the eval endpoint. T...

PT-2025-48588

Name of the Vulnerable Software and Affected Versions Tencent Hunyuan3D-1 affected versions not specified Description A flaw exists within the load pretrained function that allows remote attackers to execute arbitrary code on affected installations of Tencent Hunyuan3D-1. The issue is due to...

PT-2025-48581

Name of the Vulnerable Software and Affected Versions Tencent PatrickStar affected versions not specified Description A flaw exists in Tencent PatrickStar that allows remote attackers to execute arbitrary code. User interaction is required, specifically the target must visit a malicious page or...

Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the merge...

PT-2025-48585

Name of the Vulnerable Software and Affected Versions Tencent HunyuanVideo affected versions not specified Description A flaw exists within the load vae function that allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanVideo. The issue stems from a lack o...

PT-2025-48589

Name of the Vulnerable Software and Affected Versions Tencent MedicalNet affected versions not specified Description A flaw exists within the generate model function that allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. The issue stems from...

Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the restorecheckpoin...

Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanVideo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the loadvae...

Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent PatrickStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2025-48582

Name of the Vulnerable Software and Affected Versions Tencent HunyuanDiT affected versions not specified Description A flaw exists in the model resume function that allows remote attackers to execute arbitrary code on affected installations. The issue stems from insufficient validation of...

Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MimicMotion. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the generatemod...

NVIDIA Megatron load_common Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the loadcommon...

PT-2025-48587

Name of the Vulnerable Software and Affected Versions Tencent HunyuanDiT affected versions not specified Description A flaw exists in Tencent HunyuanDiT that allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious page or opening a...