Lucene search
+L

27 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-7690

Malicious code in bioql PyPI...

9.8CVSS5.4AI score0.00791EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2025-11522

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00402EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/04/26 6:31 a.m.•23 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

7.5CVSS7AI score0.00402EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/17 1:15 a.m.•39 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

7.5CVSS0.00402EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/04/17 12:00 a.m.•12 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

3.3CVSS6.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/04/17 12:00 a.m.•108 views

CVE-2025-43708

CVE-2025-43708 affects Visicut 2.1. The vulnerability arises from insecure deserialization of XML documents containing nested set elements, which can trigger a java.util.HashMap StackOverflowError (e.g., when reference is '../../../set/set[2]'), leading to stack consumption. Multiple sources corr...

7.5CVSS7AI score0.00402EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2025/04/17 12:00 a.m.•11 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

7.5CVSS0.00402EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•19 views

VisiCut 安全漏洞

VisiCut is a tool from the personal developer Thomas Oster. A security vulnerability exists in VisiCut version 2.1, which stems from the fact that XML documents with nested set elements can lead to stack consumption, such as unsafe deserialization issues...

7.5CVSS6.6AI score0.00402EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•22 views

PT-2025-16925

Name of the Vulnerable Software and Affected Versions VisiCut version 2.1 Description The issue is related to insecure deserialization, where VisiCut 2.1 allows stack consumption via an XML document with nested set elements. This can be demonstrated by a java.util.HashMap StackOverflowError when...

7.5CVSS6.1AI score0.00402EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2025/04/17 12:00 a.m.•16 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

3.3CVSS4.1AI score0.00402EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/04/17 12:00 a.m.•42 views

CVE-2025-43708

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

3.3CVSS0.00402EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•6 views

CVE-2025-43708: Uncontrolled Recursion

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMap StackOverflowError when reference='../../../set/set2' is used, aka an "insecure deserialization" issue...

7.5CVSS5.7AI score0.00402EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/15 2:16 a.m.•22 views

CVE-2025-25940

VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java...

9.8CVSS7.4AI score0.00791EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/10 12:00 a.m.•18 views

CVE-2025-25940

VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java...

9.7AI score0.00791EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/03/10 12:00 a.m.•23 views

VisiCut 代码问题漏洞

VisiCut is a tool by Thomas Oster, a personal developer. A security vulnerability exists in VisiCut version 2.1, which stems from unsafe XML deserialization in the loadPlfFile method of VisiCutModel.java, which could lead to code execution...

9.8CVSS7.2AI score0.00791EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/03/10 12:00 a.m.•39 views

CVE-2025-25940

VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java...

0.00791EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/10 12:00 a.m.•105 views

CVE-2025-25940

VisiCut version 2.1 is vulnerable to code execution due to Insecure XML Deserialization (CWE-502) within the loadPlfFile method of VisicutModel.java. This flaw allows an attacker to execute arbitrary code on the system. As a mitigation, it is recommended to restrict the use of the loadPlfFile met...

9.8CVSS7.7AI score0.00791EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2025/03/10 12:00 a.m.•22 views

CVE-2025-25940

VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java...

9.8CVSS7.7AI score0.00791EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/03/10 12:00 a.m.•24 views

PT-2025-10599 · Visicut · Visicut

Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue allows code execution via insecure XML deserialization in the loadPlfFile method of VisicutModel.java. Recommendations: For VisiCut version 2.1, consider restricting the use of the loadPlfFile method...

9.8CVSS7AI score0.00791EPSS
SaveExploits1References11
Mend
Mend
•added 2025/03/10 12:00 a.m.•9 views

CVE-2025-25940

VisiCut 2.1 allows code execution via Insecure XML Deserialization in the loadPlfFile method of VisicutModel.java...

9.8CVSS0.00791EPSS
SaveExploits1References5
Rows per page
Query Builder