5590 matches found
PT-2025-9474
Name of the Vulnerable Software and Affected Versions Brent Jett Assistant versions 1.5.1 and earlier Description The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations For versions 1.5.1 and earlier, update to a version that contains a fix for...
NI DAQExpress LVPROJECT File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI DAQExpress. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
WordPress plugin Album Gallery 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
CVE-2024-13831 Tabs for WooCommerce <= 1.0.0 - Authentiated (Shop Manager+) PHP Object Injection in product_has_custom_tabs
The Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.0 via deserialization of untrusted input in the 'producthascustomtabs' function. This makes it possible for authenticated attackers, with Shop Manager-level access and...
CVE-2024-13831
CVE-2024-13831 concerns Tabs for WooCommerce (WordPress)
WordPress plugin PixelYourSite 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the lack of deserialization mechanisms. This allows attackers to escalate their privileges, execute arbitrary code, or cause service failures.
The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the deserialization mechanism. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
WordPress plugin Tabs for WooCommerce 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code issue vulnerability...
CVE-2025-1741 b1gMail Admin Page users.php deserialization
A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched...
WordPress plugin WP Activity Log 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
b1gMail 代码问题漏洞
b1gMail is an email service from b1gMail open source. A code issue vulnerability exists in b1gMail 7.4.1-pl1 and earlier versions that stems from deserialization...
CVE-2025-27301
Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager nhrrob-options-table-manager allows Object Injection.This issue affects NHR Options Table Manager: from n/a through = 1.1.2...
CVE-2025-26900 WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX flexmls-idx allows Object Injection.This issue affects Flexmls® IDX: from n/a through = 3.14.27...
CVE-2025-26900
CVE-2025-26900: Deserialization of untrusted data in Flexmls IDX Plugin for WordPress (
WordPress plugin Flexmls IDX 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
WordPress NHR Options Table Manager Plugin <= 1.1.2 - Deserialization of untrusted data vulnerability
Deserialization of untrusted data vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin NHR Options Table Manager versions = 1.1.2...
WordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerability
Deserialization of untrusted data vulnerability discovered by Phan Trong Quan - VNPT Cyber Immunity in WordPress Plugin ADFO versions = 1.9.1...
CVE-2025-27301 WordPress NHR Options Table Manager Plugin <= 1.1.2 - Deserialization of untrusted data vulnerability
Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager nhrrob-options-table-manager allows Object Injection.This issue affects NHR Options Table Manager: from n/a through = 1.1.2...
CVE-2025-27301
CVE-2025-27301 describes a deserialization of untrusted data vulnerability in the WordPress plugin NHR Options Table Manager (affected: versions up to 1.1.2). According to the connected sources, the flaw enables an object injection scenario via deserialization of untrusted data, with CVSS v3.1 me...