CVE-2026-94093 DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 Pre-auth RCE in OpenIdentityPlatform OpenAM vi...

CVE-2026-94092

dmlc/dgl (Deep Graph Library) versions up to 2.1.0 are affected by an unsafe deserialization vulnerability in the load_info/_read_torch_data function within utils.py . Manipulating the path argument allows a remote attacker with low privileges and passive user interaction to trigger deserializati...

CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...

CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...

CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization

A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...

CVE-2026-94091 piskvorky gensim Model Loader utils.py load deserialization

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-94091 piskvorky gensim Model Loader utils.py load deserialization

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-94091 piskvorky gensim Model Loader utils.py load deserialization

A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This manipulation of the argument fname causes deserialization. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-94091

A deserialization flaw exists in piskvorky gensim (up to 4.4.0 ) in the Model Loader component, specifically the Load function in gensim/utils.py. The root cause is an unguarded pickle.load call in SaveLoad.load when processing the fname argument, enabling remote exploitation. The maintainers clo...

research-pocs

Research PoCs 2 entries. This index is auto-generated — do no...

CVE-2026-85017

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

CVE-2026-87067

The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing users who hold its forms-management permission to write a file of their choosing and execute arbitrary code. That permissi...

EUVD-2026-83670

The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing users who hold its forms-management permission to write a file of their choosing and execute arbitrary code. That permissi...

CVE-2026-85017 Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

EUVD-2026-83669

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

CVE-2026-85017

The Unlimited Elements For Elementor WordPress plugin (versions before 2.0.20 ) is vulnerable to PHP Object Injection . The root cause is a missing capability check on an AJAX action , which allows the plugin to deserialize attacker-controlled stored data. This flaw enables authenticated attacker...

Interpreter-HackTheBox

Interpreter — HackTheBox プラットフォーム: HackTheBox OS: Linux ステータス: リタイア済み — 完全なウォークスルー公開中。 完全なウォークスルー: l3dsec.com/walkthroughs/interpreter-htb 攻撃チェーン root@kitploit: Nmap → Mirth Connect 4.4.0 80/443 → CVE-2023-43208 未認証 Java デシリアライゼーション RCE → mirth としてシェル取得 → mirth.properties → MySQL 認証情報 → MySQL →...

PT-2026-95922

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor versions prior to 2.0.20 Description The plugin fails to perform a capability check on an AJAX action and deserializes stored data controlled by an attacker. This allows authenticated users with subscriber-leve...

CVE-2026-94093: Deserialization of Untrusted Data

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...