37610 matches found
CVE-2025-15672
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
CVE-2025-15672
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
CVE-2025-15672 Chama < 1.0.13 - Unauthenticated PHP Object Injection
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
EUVD-2025-210596
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
CVE-2025-15672
The ChamaWP WordPress plugin (versions prior to 1.0.13 ) is vulnerable to unauthenticated PHP object injection due to improper validation of user input before it is passed to a PHP deserialization function . An attacker can exploit this to inject arbitrary PHP objects, potentially achieving remot...
CVE-2025-15672 Chama < 1.0.13 - Unauthenticated PHP Object Injection
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
Exploit for NULL Pointer Dereference in Pgbouncer
--- CVE-2026-6666 – XPC Service NSKeyedUnarchiver Deserializ...
Exploit for External Control of Assumed-Immutable Web Parameter in Google Chrome
--- 10. CVE-2026-9998 – Insecure Deserialization in Blockcha...
EUVD-2026-52012
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
Azure Active Directory Deserialization DoS
The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-18642: Deserialization of Untrusted Data
Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4...
PT-2026-67398
Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp-lock allows Object Injection. This issue affects eta-otp-lock: before 1.0.4...
PT-2026-66999
Name of the Vulnerable Software and Affected Versions ChamaWP versions prior to 1.0.13 Description Insufficient validation of user input before it is processed by a PHP deserialization function allows unauthenticated attackers to inject arbitrary PHP objects. This can lead to remote code executio...
CVE-2025-15672: Deserialization of Untrusted Data
The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...
CVE-2026-3245: Deserialization of Untrusted Data
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-3245
Technical details for CVE-2026-3245 are not publicly available in the provided documents. Monitor for updates; no product/version-specific information, exploitable vectors, or fixes are described here.