Lucene search
+L

29769 matches found

GithubExploit
GithubExploit
added 2025/12/26 7:22 a.m.250 views

Exploit for Deserialization of Untrusted Data in Microsoft

No d...

9.8CVSS7AI score0.99979EPSS
SaveExploits24
Positive Technologies
Positive Technologies
added 2025/12/26 12:00 a.m.14 views

PT-2025-53604

Name of the Vulnerable Software and Affected Versions LMDeploy versions prior to 0.11.1 Description LMDeploy is a toolkit used for compressing, deploying, and serving LLMs. A flaw exists where the torch.load function is called without the weights only=True parameter when loading model checkpoint...

8.8CVSS7.4AI score0.00605EPSS
SaveExploits0References16
VulnCheck KEV
VulnCheck KEV
added 2025/12/26 12:00 a.m.14 views

VulnCheck KEV: CVE-2023-44353

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction...

9.8CVSS5.9AI score0.80178EPSS
SaveIn wildExploits0References2
GithubExploit
GithubExploit
added 2025/12/25 7:28 p.m.189 views

Exploit for Deserialization of Untrusted Data in Facebook React

🚀 NextjsRCEExploitTool - Easy Way to Test Security Flaws...

10CVSS7AI score0.99802EPSS
SaveExploits404
Patchstack
Patchstack
added 2025/12/25 1:39 p.m.13 views

WordPress WpEvently plugin <= 5.0.8 - Deserialization of untrusted data vulnerability

Deserialization of untrusted data vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WpEvently versions = 5.0.8...

8.8CVSS5.3AI score0.00368EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.13 views

CVE-2025-68038

Deserialization of Untrusted Data vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Object Injection.This issue affects Icegram Express Pro: from n/a through 5.9.14...

7.2CVSS5.9AI score0.00443EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/12/25 12:00 a.m.9 views

The vulnerability of the NVIDIA Isaac Lab platform for unifying and simplifying robotic processes is related to deficiencies in the deserialization mechanism, allowing a hacker to execute arbitrary code.

The vulnerability of the NVIDIA Isaac Lab platform for unifying and simplifying robotic processes is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.0065EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2025/12/25 12:00 a.m.19 views

Apache HugeGraph-Server Deserialization Vulnerability

Apache HugeGraph-Server is a server-side process for graph databases from the Apache Foundation. Apache HugeGraph-Server suffers from a deserialization vulnerability that stems from insecure Hessian deserialization in the PD store, which can be exploited by an attacker to cause remote code...

8.8CVSS8.1AI score0.00893EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.11 views

CVE-2025-13714

Tencent MedicalNet generatemodel Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the targ...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.13 views

CVE-2025-13711

Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.10 views

CVE-2025-13709

Tencent TFace restorecheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.11 views

CVE-2025-13715

Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent FaceDetection-DSFD. User interaction is required to exploit this vulnerability in that...

7.8CVSS7.9AI score0.00439EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.11 views

CVE-2025-13706

Tencent PatrickStar mergecheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent PatrickStar. User interaction is required to exploit this vulnerability in that the...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.7 views

CVE-2025-13712

Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.12 views

CVE-2025-13707

Tencent HunyuanDiT modelresume Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.8 views

CVE-2025-13710

Tencent HunyuanVideo loadvae Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanVideo. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.13 views

CVE-2025-13708

Tencent NeuralNLP-NeuralClassifier loadcheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent NeuralNLP-NeuralClassifier. User interaction is required to exploit th...

7.8CVSS7.9AI score0.00501EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.12 views

CVE-2025-13713

Tencent Hunyuan3D-1 loadpretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent Hunyuan3D-1. User interaction is required to exploit this vulnerability in that the...

7.8CVSS7.9AI score0.00508EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 9:19 p.m.8 views

CVE-2025-14931

Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this...

10CVSS8AI score0.011EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/24 9:06 p.m.205 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner High Fidelity Detection for RSC/Next.js R...

10CVSS7.5AI score0.99802EPSS
SaveExploits404
Rows per page
Query Builder