PT-2024-16957 · Hugging Face · Huggingface/Transformers

Name of the Vulnerable Software and Affected Versions: Hugging Face Transformers affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this issue,...

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free my-geo-posts-free allows Object Injection.This issue affects My Geo Posts Free: from n/a through = 1.2...

CVE-2024-52433

Deserialization of Untrusted Data vulnerability in Mindstien Technologies My Geo Posts Free allows Object Injection.This issue affects My Geo Posts Free: from n/a through 1.2...

CVE-2024-52430

Deserialization of Untrusted Data vulnerability in Lis Lis Video Gallery allows Object Injection.This issue affects Lis Video Gallery: from n/a through 0.2.1...

CVE-2024-52432

Deserialization of Untrusted Data vulnerability in NIX Solutions Ltd NIX Anti-Spam Light allows Object Injection.This issue affects NIX Anti-Spam Light: from n/a through 0.0.4...

WordPress plugin Lis Video Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Apache HertzBeat 代码问题漏洞

Apache HertzBeat is a tool from the American company Apache Apache that can monitor various components. A deserialization vulnerability exists in Apache HertzBeat versions prior to 1.6.1, which can be exploited by an attacker to cause code execution...

CVE-2024-52409

CVE-2024-52409 refers to a Deserialization of Untrusted Data vulnerability in the WordPress plugin AJAX Random Posts (versions up to 0.3.3). The issue enables PHP Object Injection through untrusted data handling. Affected software is AJAX Random Posts; the known vulnerable range is

CVE-2024-52411

CVE-2024-52411 describes a deserialization of untrusted data vulnerability in Flowcraft UX Design Studio Advanced Personalization, enabling PHP object injection. Affected: Flowcraft Advanced Personalization component, versions up to 1.1.2 (n/a through 1.1.2). CVSS 3.1 base 9.8 (Network attack vec...

CVE-2024-52414

CVE-2024-52414 affects the WordPress plugin WDES Responsive Mobile Menu (versions up to 5.3.18). The issue is a Deserialization of Untrusted Data leading to PHP Object Injection. Impact is rated critical with high confidentiality, integrity, and availability implications. Remedy: upgrade to versi...

PT-2024-35251 · Unknown · Flowcraft Ux Design Studio

Name of the Vulnerable Software and Affected Versions: Flowcraft UX Design Studio Advanced Personalization versions from n/a through 1.1.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This problem affects the Advanced Personalization...

PT-2024-35250 · Unknown · Phoenixheart Referrer Detector

Name of the Vulnerable Software and Affected Versions: Phoenixheart Referrer Detector versions n/a through 4.2.1.0 Description: A Deserialization of Untrusted Data vulnerability exists in the Phoenixheart Referrer Detector, allowing Object Injection. This issue affects the handling of untrusted...

WordPress plugin Airin Blog 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection through the SVG parser. An attacker can perform server-side request forgery, disclose internal image files, and execute PHAR deserialization attacks by manipulating XML input. Note: This vulnerability i...

CVE-2024-10962

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replacerowdata' and 'replaceserializedata' functions. This makes it possible for unauthenticated attacke...

PT-2024-16666 · WordPress · Migration

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging – WPvivid plugin for WordPress versions up to, and including, 0.9.107 Description: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted...

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of software for managing and monitoring remote objects in telemetry and telemechanics systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges by sending specially...

Understanding Deserialization

Thinkphp is vulnerable to Understanding Deserialization. The vulnerability is due to improper validation and handling of serialized user input in the \controller\Index.php component, allowing attackers to execute arbitrary code...

Siemens TeleControl Server Basic Deserialization Vulnerability

TeleControl Server Basic allows remote monitoring and control of plants via WAN/LAN. A deserialization vulnerability exists in Siemens TeleControl Server Basic, which can be exploited by an attacker to execute arbitrary code on a device with SYSTEM privileges...

Siemens多款产品 代码问题漏洞

SIMATIC S7-PLCSIM simulates the S7-1200, S7-1500 and a number of other PLC derivatives shipped as part of SIMATIC STEP 7. simatic step7 TIA Portal is an engineering software package for configuring and programming SIMATIC controllers. simmocode ES is the simmocode ES is the core software package...