White-Jotter 安全漏洞

White-Jotter is a front-end and back-end separation project developed by Antabot individual developer using Vue+Spring Boot, with a full set of development tutorials. A security vulnerability exists in White-Jotter version 0.22, which stems from the component com.gm.wj.config.ShiroConfiguration's...

Linux Distros Unpatched Vulnerability : CVE-2024-56180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\ma...

Deserialization of Untrusted Data

Overview skops is an A set of tools to push scikit-learn based models to and pull from Hugging Face Hub Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the getmodel function due to insecure pickle loading. An attacker can execute arbitrary code by supplyi...

WordPress YITH WooCommerce Compare plugin <= 3.6.0 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by mcdruid in WordPress Plugin YITH WooCommerce Compare versions = 3.6.0...

SuiteCRM 输入验证错误漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. An input validation error vulnerability exists in SuiteCRM versions 7.14.6 and 8.8.0, which stems from passing user input to a deserialization function without validating it, and could lead to multiple attacks...

CVE-2025-54620

Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54620

Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54620

CVE-2025-54620 corresponds to a deserialization vulnerability in Huawei HarmonyOS’s ability module involving untrusted data. Confirmed impact is availability disruption (CVSSv3.1: Local attack, Low attack complexity, Privileges Required: Low, No user interaction, Unchanged scope; Confidentiality ...

CVE-2025-54620

Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54620

Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability...

(0Day) Microsoft SharePoint IsAuthorizedType Deserialization of Untrusted Data Information Disclosure and Denial-of-Service Vulnerability

This vulnerability allows remote attackers to disclose sensitive information or create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the...

PT-2025-32027 · Unknown · Ability Module

Name of the Vulnerable Software and Affected Versions: ability module affected versions not specified Description: The ability module contains a deserialization vulnerability involving untrusted data. Successful exploitation of this issue may affect availability. Recommendations: At the moment,...

BentoML 1.x < 1.4.8 Insecure Deserialization

According to its banner, the version of BentoML running on the remote host is 1.x 1.4.8. It is, therefore, affected by an Insecure Deserialization vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability

WordPress Yogi - Health Beauty & Yoga Theme = 2.9.2 - Deserialization of untrusted data Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Yogi - Health Beauty & Yoga versions = 2.9.2...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...

Deserialization of Untrusted Data

Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the Checkpoint path parameter in the WebUI interface during the training process. An attacker can exploit this vulnerability by supplying a...

CVE-2025-25692

A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...

CVE-2025-50472

The CVE-2025-50472 entry affects modelscope/ms-swift up to version 2.6.1, with a deserialization vulnerability in ModelFileSystemCache.load_model_meta() that uses pickle.load() on a hidden, malicious .mdl payload. This enables remote code execution during a normal training workflow when a tampere...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...