Lucene search
+L

5574 matches found

RedhatCVE
RedhatCVE
added 2025/07/15 4:18 a.m.8 views

CVE-2025-53416

Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution...

7.8CVSS7.7AI score0.0026EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/07/13 11:56 p.m.274 views

Exploit for Deserialization of Untrusted Data in Wazuh

I...

9.9CVSS7.3AI score0.9384EPSS
SaveExploits11
GithubExploit
GithubExploit
added 2025/07/11 7:47 a.m.282 views

Exploit for Deserialization of Untrusted Data in Apache Dubbo

CVE-2023-23638 For educational purposes only. Provided by Zo...

9.8CVSS7.3AI score0.04847EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2025/07/10 7:52 a.m.216 views

Exploit for CVE-2024-3568

Exploitation of pickle deserialization vulnerabilities in Tran...

3.4CVSS5.8AI score0.02067EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/07/09 3:14 p.m.9 views

CVE-2025-6810

Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mescius ActiveReports.NET. Interaction with this library is required to exploit this...

9.8CVSS8.2AI score0.00738EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/07/09 4:32 a.m.52 views

CVE-2025-7216 lty628 Aidigu PHP Object common.php checkUserCookie deserialization

A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This affects the function checkUserCookie of the file /application/common.php of the component PHP Object Handler. The manipulation of the argument rememberMe leads to deserialization. It is possible to...

7.5CVSS0.0039EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/07/08 11:28 p.m.16 views

CVE-2025-3108

A critical deserialization vulnerability exists in the run-llama/llamaindex library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. JsonPickleSerializer prioritiz...

7.5CVSS6.1AI score0.00428EPSS
SaveExploits1References1
NVD
NVD
added 2025/07/08 10:15 p.m.10 views

CVE-2025-49533

Adobe Experience Manager MS versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged...

9.8CVSS0.52247EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/08 10:15 p.m.6 views

CVE-2025-27203

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

9.6CVSS6.3AI score0.00992EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/08 9:32 p.m.82 views

CVE-2025-49533

Adobe Experience Manager (MS) versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution. The issue enables pre-auth, no-user-interaction exploitation and is associated with AEM Forms/Deserialization vectors in multi...

9.8CVSS7.2AI score0.52247EPSS
SaveIn wildExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/07/08 9:32 p.m.5 views

CVE-2025-49533

Adobe Experience Manager MS versions 6.5.23.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction. Scope is unchanged...

9.8CVSS6.3AI score0.52247EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/07/08 9:25 p.m.6 views

CVE-2025-27203

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

9.6CVSS6.2AI score0.00992EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/08 9:25 p.m.236 views

CVE-2025-27203 Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

9.6CVSS0.00992EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/08 5:15 p.m.0 views

CVE-2025-47994

Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally...

8.6CVSS5.7AI score0.02792EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/08 12:00 a.m.10 views

SAP NetWeaver Enterprise Portal Administration 代码问题漏洞

SAP NetWeaver Enterprise Portal Administration is an access control software from SAP, Germany. A code issue vulnerability exists in SAP NetWeaver Enterprise Portal Administration, which originates from a privileged user being able to upload untrusted content that, when deserialized, could impact...

9.1CVSS9.3AI score0.0072EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/08 12:00 a.m.6 views

SAP NetWeaver 代码问题漏洞

SAP NetWeaver is a set of integrated service-oriented application platform from SAP. The platform primarily provides a development and runtime environment for SAP applications. A code issue vulnerability exists in SAP NetWeaver that stems from insecure Java deserialization and could lead to high...

9.1CVSS9.3AI score0.0072EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/08 12:00 a.m.9 views

Adobe Experience Manager 代码问题漏洞

Adobe Experience Manager is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A code...

9.8CVSS7.6AI score0.52247EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/07 3:15 p.m.8 views

CVE-2025-6810

Mescius ActiveReports.NET ReadValue Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mescius ActiveReports.NET. Interaction with this library is required to exploit this...

9.8CVSS0.00738EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/07 2:52 p.m.7 views

CVE-2025-6811 Mescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code Execution Vulnerability

Mescius ActiveReports.NET TypeResolutionService Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mescius ActiveReports.NET. Interaction with this library is required to exploit...

9.8CVSS8.1AI score0.00738EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/07 2:52 p.m.46 views

CVE-2025-6811

CVE-2025-6811 affects Mescius ActiveReports.NET via the TypeResolutionService deserialization of untrusted data, enabling remote code execution. The flaw arises from improper validation of user-supplied data in TypeResolutionService, which can lead to deserialization of untrusted data and code ex...

9.8CVSS9.7AI score0.00738EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder