CVE-2026-13244

The Tealium iQ Tag Management module for Drupal (versions 0.0.0 to 2.4.0 ) is vulnerable to Object Injection due to the Improperly Controlled Modification of Dynamically-Determined Object Attributes . The tealiumiq field stores data as PHP-serialized strings , which allows for the execution of ma...

CVE-2026-55810

The Drupal Plotly.js Graphing module (versions 0.0.0 to 3.0.2 ) is vulnerable to PHP object injection due to the improper controlled modification of dynamically-determined object attributes. The module stores certain data as PHP-serialized strings , which can be exploited if malicious data is wri...

CVE-2026-55809

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attendance field allows Object Injection. This issue affects Flag attendance field versions: from 0.0.0 to 1.2...

CVE-2026-12535

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0...

CVE-2026-12535

The Drupal Formatter Field module (versions 0.0.0 to 2.0.0 ) is vulnerable to Object Injection due to the Improperly Controlled Modification of Dynamically-Determined Object Attributes . The module stores data as PHP-serialized strings , which can be exploited if an attacker writes malicious data...

CVE-2026-12535 Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0...

CVE-2025-14341 Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Excessive Allocation, Flooding. This issue affects DivvyDrive: from 4.8.2.19 before...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview deepdiff is a Deep Difference and Search of any Python object/data. Recreate objects by adding adding deltas to each other. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the RestrictedUnpickler...

CVE-2025-13081

Drupal core is vulnerable to an Object Injection flaw caused by the Improperly Controlled Modification of Dynamically-Determined Object Attributes . This vulnerability affects Drupal core versions 8.0.0 before 10.4.9 , 10.5.0 before 10.5.6 , 11.0.0 before 11.1.9 , and 11.2.0 before 11.2.8 . Explo...

Non-Adaptive Adversarial Face Generation

Adversarial attacks on face recognition systems FRSs pose serious security and privacy threats, especially when these systems are used for identity verification. In this paper, we propose a novel method for generating adversarial faces-synthetic facial images that are visually distinct yet...

UBUNTU-CVE-2022-27777

A XSS Vulnerability in Action View tag helpers = 5.2.0 and 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes...