Microsoft Update Catalog Deserialization Vulnerability

The Microsoft Update Catalog is an update Web site from the U.S.-based Microsoft Corporation Microsoft. It is used to provide the company with a list of patches, drivers and software. Microsoft Update Catalog suffers from a deserialization vulnerability that originates from deserializing untruste...

CVE-2024-12741 Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that...

CVE-2024-12741 Deserialization Of Untrusted Data Vulnerability In NI DAQExpress Project File

A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. Please note that...

CVE-2024-12741

NI DAQExpress has a deserialization of untrusted data vulnerability that can lead to remote code execution when a user opens a specially crafted LVPROJECT file. Affected products: DAQExpress 5.1 and earlier (DAQExpress is EOL and will not receive updates). Exploitation requires user interaction (...

CVE-2024-56058

Deserialization of Untrusted Data vulnerability in denniskravetstns VRPConnector vrpconnector allows Object Injection.This issue affects VRPConnector: from n/a through = 2.0.1...

CVE-2024-56058 WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Gueststream VRPConnector allows Object Injection.This issue affects VRPConnector: from n/a through 2.0.1...

CVE-2024-56058

Summary (CVE-2024-56058): WordPress VRPConnector plugin versions ≤ 2.0.1 are affected by a deserialization of untrusted data vulnerability that enables PHP Object Injection. The issue allows unauthenticated attackers to inject a PHP object, potentially leading to compromise such as arbitrary file...

NI DAQExpress 安全漏洞

NI DAQExpress National Instruments DAQExpress is an interactive application software from National Instruments NI Inc. It is used to quickly acquire, analyze, and present data from data acquisition devices. A security vulnerability exists in NI DAQExpress that stems from the inclusion of an...

CVE-2024-54367 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

CVE-2024-54367 WordPress ForumWP plugin <= 2.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Ultimate Member ForumWP forumwp allows Object Injection.This issue affects ForumWP: from n/a through = 2.1.0...

Siemens TeleControl Server Basic Deserialization RCE (CVE-2024-44102

Binary data siemenstelecontrolserverbasiccve-2024-44102.nbin...

CVE-2024-54282

CVE-2024-54282 is a Deserialization of Untrusted Data vulnerability in WP Mega Menu (Themeum). The connected RH/Wordfence entries show an Authenticated (Administrator+) PHP Object Injection via deserialization affecting WP Mega Menu versions up to 1.4.2. Remediation is to upgrade to a non-affecte...

CVE-2024-54282 WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu allows Object Injection.This issue affects WP Mega Menu: from n/a through 1.4.2...

CVE-2024-54273 WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker allows Object Injection.This issue affects Mail Picker: from n/a through 1.0.14...

CVE-2024-54273 WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in PickPlugins Mail Picker mail-picker allows Object Injection.This issue affects Mail Picker: from n/a through = 1.0.14...

CVE-2024-11839

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

PT-2024-36552 · Unknown · Crater Invoice

Name of the Vulnerable Software and Affected Versions: Crater Invoice affected versions not specified Description: A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP KEY to achieve remote command execution on the server by manipulating the laravel sessi...

The vulnerability of the software development environment for systems that automate technological processes, the Totally Integrated Automation Portal (Portal TIA), and the software used for modeling and simulating the operation of Siemens S7 controllers, arises due to deficiencies in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerability of the software development environment of Totally Integrated Automation Portal Portal TIA, the software for modeling and simulation of Siemens S7 series controllers, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to...

CVE-2024-12312 Print Science Designer <= 1.3.152 - Unauthenticated PHP Object Injection

The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.152 via deserialization of untrusted input through the 'designer-saved-projects' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No...

CVE-2024-11947

GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability. The specific flaw exists withi...