EUVD-2024-52489

Malicious code in bioql PyPI...

EUVD-2024-0111

Malicious code in bioql PyPI...

EUVD-2024-28158

Malicious code in bioql PyPI...

EUVD-2024-2133

Malicious code in bioql PyPI...

EUVD-2025-3529

Malicious code in bioql PyPI...

EUVD-2025-17127

Malicious code in bioql PyPI...

EUVD-2023-0300

Malicious code in bioql PyPI...

EUVD-2025-14451

Malicious code in bioql PyPI...

EUVD-2025-14897

Malicious code in bioql PyPI...

EUVD-2024-2191

Malicious code in bioql PyPI...

EUVD-2024-31357

Malicious code in bioql PyPI...

EUVD-2025-17733

Malicious code in bioql PyPI...

EUVD-2024-22205

Malicious code in bioql PyPI...

EUVD-2023-31797

Malicious code in bioql PyPI...

CVE-2025-58384

In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET Remoting library in the Watchdoc administration interface...

SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Web Help Desk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AjaxProxy class. The issue results from the lack of proper validation of...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization process. An attacker can exhaust CPU resources and render the application or system unresponsive by submitting a large, specially crafted data payload. Details Serialization is a...

Security Updates for Microsoft HPC Pack (September 2025)

The Microsoft HPC Pack installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - Deserialization of untrusted data in Microsoft High Performance Compute Pack HPC allows an unauthorized attacker to execute code over a network...

Deserialization of Untrusted Data

Overview sglang is a SGLang is a fast serving framework for large language models and vision language models. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the main function in the /updateweightsfromtensor process in...

CVE-2025-41701 Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context...