EUVD-2026-0750

MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation...

CVE-2025-31047

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

CVE-2025-31047 WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

EUVD-2026-0878

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

CVE-2025-31047

CVE-2025-31047: Deserialization of untrusted data in Themify Edmin theme (

WordPress plugin Themify Edmin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

PT-2026-1207

Name of the Vulnerable Software and Affected Versions milvus versions up to 2.6.7 Description A security issue has been identified in milvus. The expr.Exec function within the pkg/util/expr/expr.go file, associated with the HTTP Endpoint component, is susceptible to deserialization due to...

Linux Distros Unpatched Vulnerability : CVE-2025-15438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::destruct of the file core/admin/medias.php of the component Media...

PT-2026-1264

Name of the Vulnerable Software and Affected Versions Themify Edmin versions through 2.0.0 Description A flaw exists in Themify Edmin that allows for object injection due to deserialization of untrusted data. This can potentially lead to unauthorized access or control. Recommendations Update...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Vulnerable Lab !CVE-2025-5518...

UBUNTU-CVE-2026-21452

MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java parses extension headers lazily, it later...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287 ⚠ This tool is created solely for educatio...

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ CVE-2025-55184Testing - Simple Tool for Security Scanning...

Deserialization of Untrusted Data

Overview feast is a Python SDK for Feast Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the YAML config parsing in Kubernetes materializer due to using the function yaml.load. An attacker can execute arbitrary operating system commands by modifying the...

PT-2026-1154

CVE-2025-22188 - Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-22188 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA...

PT-2026-1159

CVE-2025-22193 - Here is a title for the vulnerability: Apache Struts Deserialization Vulnerability CVE ID : CVE-2025-22193 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because i...

Exploit for Deserialization of Untrusted Data in Facebook React

CyberSec Blog CTF - React2Shell PoC Ce dépôt fournit un envir...

WordPress Sound | Musical Instruments Online Store theme <= 1.6.9 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Sound | Musical Instruments Online Store versions = 1.6.9...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the getlincoef function. An attacker can execute arbitrary code by crafting a malicious pickle file that...

CVE-2025-15246

A vulnerability was determined in aizuda snail-job up to 1.7.0 on macOS. Affected by this vulnerability is the function FurySerializer.deserialize of the component API. This manipulation of the argument argsStr causes deserialization. Remote exploitation of the attack is possible. The exploit has...