185 matches found
CVE-2026-61773
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61774
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
EUVD-2026-69322
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61760
CVE-2026-61760 is a deserialization of untrusted data vulnerability (CWE-502) in NVIDIA Megatron Bridge , affecting versions 0.0 through 0.5.0 on all platforms. A successful local exploit with low privileges required could result in code execution, data tampering, and information disclosure , wit...
CVE-2026-61760
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61762
NVIDIA Megatron Bridge (versions 0.0 to 0.5.0) is vulnerable to deserialization of untrusted data (CWE-502). An attacker with local access and low privileges can exploit this to achieve code execution, data tampering, and information disclosure , rated CVSS 7.8 (HIGH) . The vulnerability affects ...
CVE-2026-61763
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61759
NVIDIA Megatron Bridge versions 0.0 through 0.5.0 (all platforms) are affected by a deserialization of untrusted data flaw (CWE-502). A local attacker with low privileges can exploit it to achieve code execution, data tampering, and information disclosure , rated CVSS 7.8 (HIGH) . This is one of ...
EUVD-2026-69312
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61750
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61751
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
EUVD-2026-69310
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2026-61758
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
EUVD-2026-69305
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...
CVE-2025-53770
CVE-2025-53770 탐지 프로젝트 CVE-2025-53770CWE-502: 신뢰할 수 없는 데이터의 역직렬화에 취약한 시스템을 식별하기 위한 포괄적인 취약점 탐지 툴킷입니다. 🔍 개요 이 프로젝트는 CVE-2025-53770신뢰할 수 없는 데이터의 안전하지 않은 역직렬화와 관련된 보안 취약점에 취약할 가능성이 있는 시스템을 식별하고 평가하기 위한 엔터프라이즈급 탐지 스크립트를 제공합니다. 툴킷은 다양한 환경에서 최대 호환성을 위해 PowerShell 및 Python 구현을 모두 포함합니다. 취약점 세부 정보 CVE ID...
RCE-NodeJs
node-serialize — CVE-2017-5941 참고: 이 문서는 오직 방어 및 교육 목적으로 작성되었습니다. 익스플로잇이나 RCE원격 코드 실행 제작에 관한 지침은 포함되어 있지 않습니다. 요약: node-serialize 0.0.4 및 유사한 구버전은 신뢰할 수 없는 역직렬화로 인해 위험을 초래할 수 있습니다 — 수신 데이터를 unserialize로 처리하기 전에 항상 검증하십시오. 탐지: 코드에서 serialize.unserialize 또는 node-serialize 존재 여부를 확인하십시오. 디코딩된 base64...
CVE-2026-82222
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1...
Deserialization of Untrusted Data
Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in nltk.picklesec.AllowlistUnpickler, nltk.tokenize.punkt.punktpickleload, and...
