Lucene search
+L

5789 matches found

attackerkb
attackerkb
•added 2026/01/07 12:38 p.m.•10 views

CVE-2025-47552

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.37...

9.8CVSS5.2AI score0.00381EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/07 9:48 a.m.•22 views

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

7.8CVSS7.5AI score0.00352EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:08 a.m.•20 views

CVE-2024-2721

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This issue affects Social Media Share Buttons: from n/a through 2.1.0...

8.8CVSS5.2AI score0.00672EPSS
SaveExploits0References1
Veracode
Veracode
•added 2026/01/07 6:16 a.m.•25 views

Denial-of-Service (DoS)

MessagePack for Java is vulnerable to a Denial-Of-Service DoS . The vulnerability is due to unbounded memory allocation during deserialization, where the library trusts attacker-controlled EXT32 payload length metadata and allocates a byte array of that declared size when ExtensionValue.getData i...

7.5CVSS7AI score0.00602EPSS
SaveExploits1References3Affected Software1
GithubExploit
GithubExploit
•added 2026/01/06 8:05 p.m.•185 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-202...

10CVSS7.9AI score0.99802EPSS
SaveExploits397
NVD
NVD
•added 2026/01/06 5:15 p.m.•20 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS0.00349EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/06 4:47 p.m.•20 views

CVE-2025-47553

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.2AI score0.00349EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/06 4:47 p.m.•14 views

CVE-2025-47553 WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This issue affects DZS Video Gallery: from n/a through 12.25...

8.8CVSS5.8AI score0.00349EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/06 4:47 p.m.•46 views

CVE-2025-47553

CVE-2025-47553 corresponds to a Deserialization of Untrusted Data vulnerability in the WordPress plugin DZS Video Gallery, affecting versions up to 12.25. The root cause is PHP object injection via deserialization of untrusted data, enabling an attacker to manipulate serialized data. The CVSS met...

8.8CVSS5.8AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/06 12:00 a.m.•18 views

WordPress plugin DZS Video Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.00349EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/05 2:59 p.m.•18 views

GHSA-CW39-R4H6-8J3X MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation

Summary Affected Components: org.msgpack.core.MessageUnpacker.readPayload org.msgpack.core.MessageUnpacker.unpackValue org.msgpack.value.ExtensionValue.getData A denial-of-service vulnerability exists in MessagePack for Java when deserializing .msgpack files containing EXT32 objects with...

7.5CVSS7AI score0.00602EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/01/05 2:59 p.m.•28 views

MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation

Summary Affected Components: org.msgpack.core.MessageUnpacker.readPayload org.msgpack.core.MessageUnpacker.unpackValue org.msgpack.value.ExtensionValue.getData A denial-of-service vulnerability exists in MessagePack for Java when deserializing .msgpack files containing EXT32 objects with...

7.5CVSS7AI score0.00602EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/01/05 2:59 p.m.•38 views

EUVD-2026-0750

MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation...

7.5CVSS6.9AI score0.00602EPSS
SaveExploits1References4
NVD
NVD
•added 2026/01/05 11:17 a.m.•18 views

CVE-2025-31047

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

8.8CVSS0.00359EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/05 10:26 a.m.•32 views

CVE-2025-31047

CVE-2025-31047: Deserialization of untrusted data in Themify Edmin theme (

8.8CVSS5.8AI score0.00359EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/05 10:26 a.m.•17 views

EUVD-2026-0878

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

8.8CVSS6.4AI score0.00359EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/05 10:26 a.m.•47 views

CVE-2025-31047 WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in Themify Themify Edmin allows Object Injection.This issue affects Themify Edmin: from n/a through 2.0.0...

8.8CVSS0.00359EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•18 views

WordPress plugin Themify Edmin 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.00359EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•19 views

PT-2026-1207

Name of the Vulnerable Software and Affected Versions milvus versions up to 2.6.7 Description A security issue has been identified in milvus. The expr.Exec function within the pkg/util/expr/expr.go file, associated with the HTTP Endpoint component, is susceptible to deserialization due to...

6.5CVSS6.2AI score0.00351EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2026/01/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2025-15438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in PluXml up to 5.8.22. Affected is the function FileCookieJar::destruct of the file core/admin/medias.php of the component Media...

7.2CVSS5AI score0.00468EPSS
SaveExploits1References2
Rows per page
Query Builder