7925 matches found
CVE-2022-32521
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert Versions prior to V7.9.0...
CVE-2022-32521
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert Versions prior to V7.9.0...
Deserialization of untrusted data
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert Versions prior to V7.9.0...
CVE-2022-32521
CVE-2022-32521 affects Schneider Electric Data Center Expert prior to v7.9.0. The issue stems from deserialization of untrusted data, enabling a remote attacker to execute arbitrary code on the server when specially crafted data is posted to the web server. Public-facing impact is described as re...
Ubuntu: Security Advisory (USN-5253-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Deserialization of untrusted data
vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untrusted data which could result in a denial of service...
PT-2023-1356 · Vmware · Vrealize Log Insight
Name of the Vulnerable Software and Affected Versions: vRealize Log Insight affected versions not specified Description: The issue is related to a deserialization vulnerability in vRealize Log Insight, which can be exploited by an unauthenticated malicious actor to trigger the deserialization of...
PT-2023-15966 · Unknown · Async Http Client
Name of the Vulnerable Software and Affected Versions: Async HTTP Client versions prior to 1.13.2 Description: The issue is related to insufficient validation of HTTP header field values before sending them to the network, allowing attackers to inject new HTTP header fields or entirely new reques...
Deserialization of untrusted data
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization...
GHSA-M95X-M25C-W9MP XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Abusing the $method argument of Client::send, it was possible to force the client to access local files or connect to undesired urls instead of the intended target server's url the one used in the Client constructor. This weakness only affects installations where all the following conditions appl...
PT-2023-33042 · Unknown · Xmlrpc Client
Name of the Vulnerable Software and Affected Versions: xmlrpc Client affected versions not specified Description: The issue allows an attacker to force the client to access local files or connect to undesired URLs instead of the intended target server's URL. This is possible by abusing the $metho...
bzip2 Denial of Service (DoS)
Working with specific payloads can cause a Denial of Service DoS vector. Both Decompress and Compress implementations can enter into infinite loops given specific payloads entered that trigger it. The issue is described in great detail in the bzip2 repository issue. Thanks to bjrjk for finding an...
RUSTSEC-2023-0004 bzip2 Denial of Service (DoS)
Working with specific payloads can cause a Denial of Service DoS vector. Both Decompress and Compress implementations can enter into infinite loops given specific payloads entered that trigger it. The issue is described in great detail in the bzip2 repository issue. Thanks to bjrjk for finding an...
Deserialization of untrusted data
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames...
PT-2023-18759 · Bzip2 +1 · Bzip2 +1
Name of the Vulnerable Software and Affected Versions: bzip2 crate versions prior to 0.4.4 Description: The issue allows attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. This can lead to a denial of service DoS vector. Both Decompress and Compre...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Used for testing the log4j2 environment. Any issues will be th...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...
Deserialization of untrusted data
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components...