585 matches found
EUVD-2025-35398
Deserialization of Untrusted Data vulnerability in universam UNIVERSAM universam-demo allows Object Injection.This issue affects UNIVERSAM: from n/a through = 8.72.34...
CVE-2025-60226
CVE-2025-60226 describes a deserialization of untrusted data vulnerability in the WordPress WordPress White Rabbit theme (up to version 1.5.2). The underlying issue is PHP Object Injection via deserializing untrusted data, as indicated by multiple connected sources. Affected software/component: W...
CVE-2025-60221
CVE-2025-60221 concerns the WordPress Captivate Sync Plugin (
CVE-2025-52737 WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator allows Object Injection.This issue affects WP Store Locator: from n/a through = 2.2.260...
CVE-2025-52737 WordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator allows Object Injection.This issue affects WP Store Locator: from n/a through = 2.2.260...
CVE-2025-32283 WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object Injection.This issue affects Solar Energy: from n/a through = 3.5...
CVE-2025-31634
CVE-2025-31634 describes a PHP Object Injection flaw in the WordPress theme “Insurance” (versions ≤ 3.5) due to deserializing untrusted data. Public sources (Patchstack/Red Hat/ENISA) confirm this is currently unpatched, affecting the Insurance theme up to 3.5; remediation is to upgrade to a vers...
WordPress plugin JobSearch 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...
PT-2025-43149
Name of the Vulnerable Software and Affected Versions designthemes Insurance versions through 3.5 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. This impacts the Insurance application. Recommendations Update to a version newe...
WordPress plugin WooCommerce Vehicle Parts Finder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
EUVD-2019-0394
Malware in sbrugna...
EUVD-2010-0693
Malware in sbrugna...
EUVD-2018-10175
Malware in sbrugna...
EUVD-2020-0502
Malware in sbrugna...
EUVD-2021-20467
Malware in sbrugna...
EUVD-2021-19919
Malware in sbrugna...
Deserialization of Untrusted Data
Overview python-socketio is a Socket.IO server and client for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data via payloads that are passed between Socket.IO processes in multi-server deployments. An attacker can execute arbitrary code by sending a...
CVE-2025-10363
CVE-2025-10363 is a deserialization of untrusted data vulnerability in Topal Finanzbuchhaltung on Windows, caused by insecure .NET deserialization. Affected: Topal Finanzbuchhaltung version 10.1.5.20 and earlier. Impact: remote code execution with high confidentiality/integrity/availability impac...
Topal Finanzbuchhaltung 安全漏洞
Topal Finanzbuchhaltung is an accounting software from Topal Switzerland. A security vulnerability exists in Topal Finanzbuchhaltung version 10.1.5.20, which originates from deserializing untrustworthy data and could lead to remote code execution...