CVE-2024-45854

Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describe’ query is run on it...

PYSEC-2024-85

Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using ‘finetune’ on it...

CVE-2024-45852

Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with...

CVE-2024-29847

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2024-29847

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution...

The vulnerability of the Clojure programming language interpreter, related to the deserialization of unreliable data, allows attackers to execute arbitrary code.

The vulnerability of the Clojure programming language interpreter is related to the deserialization of unreliable data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AgentPortal service. The issue results from the lack of proper validation of...

The vulnerability of the Clojure programming language interpreter, related to the deserialization of unreliable data, allows attackers to trigger a service failure.

The vulnerability of the Clojure programming language interpreter is related to the deserialization of unreliable data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

PT-2024-31812 · Mindsdb · Mindsdb

Name of the Vulnerable Software and Affected Versions: MindsDB versions 23.10.2.0 and newer Description: The issue concerns the deserialization of untrusted data in the MindsDB platform. This allows a maliciously uploaded 'inhouse' model to run arbitrary code on the server when using 'finetune' o...

The vulnerability of the Ivanti EPM endpoint management software, related to defects in the deserialization mechanism, allows a hacker to execute arbitrary code.

The vulnerability of the Ivanti EPM endpoint management software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Deserialization Of Untrusted Data

topthink/framework is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of untrusted data during deserialization, allowing attackers to execute arbitrary code...

GHSA-F4WH-359G-4PQ7 ThinkPHP deserialization vulnerability

A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...

ThinkPHP 安全漏洞

Top Think Information Technology ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Think Information Technology. A security vulnerability exists in ThinkPHP versions v6.1.3 through v8.0.4, which stems from the presence of a deserialization...

CVE-2024-40711

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE...

CVE-2024-40711

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE...

CVE-2024-40711

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication version 12.1.2.172 and prior versions 12, which stems from the inclusion of an untrusted data deserialization issue that could lead to remote code executio...

CVE-2024-40711

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. Recent assessments: ccondon-r7 at November 22, 2024 4:42pm UTC reported: Critical unauthenticated remote code execution vulnerability in Veeam Backup & Replication, a...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ImportSQLTable process when an attacker submits a JSON document containing a crafted connectionurl property. An attacker can execute arbitrary commands and read files by supplying a malicious JD...

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in deserialization mechanisms, allows a hacker to execute arbitrary commands.

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...