EUVD-2021-2590

Malware in sbrugna...

EUVD-2024-49084

Malicious code in bioql PyPI...

EUVD-2022-36359

Malicious code in bioql PyPI...

EUVD-2023-1936

Malicious code in bioql PyPI...

EUVD-2024-25863

Malicious code in bioql PyPI...

CVE-2024-0140

NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data issue. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2025-29807

CVE-2025-29807 is a remotely exploitable vulnerability affecting Microsoft Dataverse (and related Dynamics products) in which an attacker can trigger code execution by deserializing untrusted data. The issue is described as a Deserialization of untrusted data that allows an authorized attacker to...

nginxWebUI deserialization vulnerability

nginxWebUI is an nginx web configuration tool. A deserialization vulnerability exists in nginxWebUI version 3.9.9, which originates from the unsafe deserialization of the nginxExe parameter of the /adminPage/conf/reload file when receiving serialized data submitted by a user, and can be exploited...

CVE-2022-45982

thinkphp 6.0.06.0.13 and 6.1.06.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

CVE-2022-24282

A vulnerability has been identified in SINEC NMS All versions = V1.0.3 V2.0, SINEC NMS All versions V1.0.3, SINEMA Server V14 All versions. The affected system allows to upload JSON objects that are deserialized to Java objects. Due to insecure deserialization of user-supplied content by the...

apache-commons-collections: InvokerTransformer code execution during deserialisation

It was found that the Apache commons-collections library permitted code execution when deserializing objects involving a specially constructed chain of classes. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using the commons-collections...

Fedora 17 : rubygem-activesupport-3.0.11-8.fc17 (2013-1710)

Fixes CVE-2013-0333. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...