CVE-2026-93447 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process...

CVE-2026-93447 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value was retrieved, deserialization could have executed attacker-controlled code with the privileges of the service process...

PT-2026-107413

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

PT-2026-107428

This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successf...

PT-2026-107630

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4...

PT-2026-107627

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

Apache Ratis 3.3.1 Java Deserialization

Summary Apache Ratis is a highly customizable Raft protocol implementation in Java. Raft is a easily understandable consensus algorithm to manage replicated state. Apache Ratis could be used in any Java application where state should be replicated between multiple instances. Description Apache...

RCE-NodeJs

node-serialize — CVE-2017-5941 Nota: Este documento es solo con fines defensivos y educativos. No incluye instrucciones para crear exploits o RCE. Resumen: node-serialize 0.0.4 y versiones antiguas similares puede suponer un riesgo debido a la deserialización no confiable: valide siempre los dato...

moveit-payload-decrypt-CVE-2023-34362

moveit-payload-decrypt-CVE-2023-34362 Este script de shell, dado el OrgKey 0, analizará el encabezado de los artefactos base64 encontrados en los registros de MOVEit y descifrará el objeto serializado utilizado como payload...

CVE-2025-55182-react2shell

CVE-2025-55182: Detector de Componentes de Servidor de React RSC Expuestos Este repositorio contiene una plantilla de Nuclei para detectar la exposición de Componentes de Servidor de React asociada con CVE-2025-55182. La vulnerabilidad afecta a aplicaciones construidas con React/Next.js donde la...

CVE-2026-65142

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

ClearML-CVE-2024-24590

/ | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe PoC de Subida de Artefacto Pickle a ClearML Este proyecto demuestra cómo subir dinámicamente un artefacto pickle a...

CVE-2026-65142

The NVIDIA Model-Optimizer software is vulnerable to the deserialization of untrusted data (CWE-502). A successful exploit could allow an attacker to achieve code execution , data tampering , denial of service , and information disclosure . No specific affected versions, remediation steps, or exp...

CVE-2026-65142

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65142

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-76750

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

CVE-2025-66478-Exploit-Poc

PoC de CVE-2025-66478 de Next.js Inglés | 한국어 Este repositorio contiene una Prueba de Concepto PoC para reproducir e investigar la vulnerabilidad CVE-2025-66478 de Next.js. Consiste en una aplicación Next.js vulnerable y un script de explotación en Python para probar la vulnerabilidad. ¿Qué es...

EUVD-2026-93877

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

CVE-2026-76750

The web interface of HPE Networking ClearPass Policy Manager is vulnerable to deserialization of untrusted data . This flaw allows an unauthenticated remote attacker to achieve Remote Code Execution (RCE) on the affected system. The vulnerability carries a CRITICAL base severity score of 9.8. No ...

CVE-2026-76750 Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...