Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

10 matches found

Veracode
Veracode•added 2022/06/30 9:55 a.m.•26 views

Untrusted Object Deserialisation

topthink/think is vulnerable to untrusted object deserialisation. The vulnerability exists in the AbstractCache function in CacheStore.php which allows an attacker to inject and execute arbitrary code via a crafted payload...

9.8CVSS9.2AI score0.23905EPSS
SaveExploits1References3Affected Software1
NVD
NVD•added 2022/06/29 12:15 p.m.•36 views

CVE-2022-33107

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS0.23905EPSS
SaveExploits1References1
osv-ghsa
osv-ghsa•added 2021/12/07 12:00 a.m.•93 views

GHSA-QRVJ-274H-HFCG Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score0.02486EPSS
SaveExploits1References3
attackerkb
attackerkb•added 2021/12/06 9:15 p.m.•16 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS7.1AI score0.02486EPSS
SaveExploits1References2
osv-cve
osv-cve•added 2021/12/06 9:15 p.m.•37 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score
SaveExploits0References1
NVD
NVD•added 2021/12/06 9:15 p.m.•61 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS0.02486EPSS
SaveExploits1References1
Prion
Prion•added 2021/12/06 9:15 p.m.•31 views

Deserialization of untrusted data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS9.5AI score0.02486EPSS
SaveExploits1References1Affected Software1
CVE
CVE•added 2021/12/06 8:22 p.m.•116 views

CVE-2021-36567

ThinkPHP v6.0.8 contains a deserialization vulnerability in the League\Flysystem\Cached\Storage\AbstractCache component. Affected software: ThinkPHP v6.0.8. Root cause: deserialization vulnerability in the specified cache storage AbstractCache. Impact (per NVD): CVSS v3.1 base score 9.8 (CRITICAL...

10CVSS9.5AI score0.02486EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist•added 2021/12/06 8:22 p.m.•68 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8AI score0.02486EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/12/06 12:00 a.m.•7 views

CVE-2021-36567: Deserialization of Untrusted Data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS5.8AI score0.02486EPSS
SaveExploits1References2
Rows per page
Query Builder