30108 matches found
NVIDIA NVTabular Deserialization Vulnerability
NVIDIA NVTabular is a component of a deep learning recommender system framework from NVIDIA, USA. A deserialization vulnerability exists in NVIDIA NVTabular, which arises from unsafe deserialization of serialized data received from users by the Workflow component and can be exploited by an attack...
Exploit for Deserialization of Untrusted Data in Facebook React
No d...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.Js React Server Components RSC Vulnerabilities This re...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Scanner – with PoC CVE-2025-55182 – React Ser...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Advanced Scanner 🚀 !Bashhttps://img.shields...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell – Advanced Discovery & Exploitation Framework An...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell CVE-2025-55182 - Proof of Concept A comprehensi...
Exploit for Deserialization of Untrusted Data in Facebook React
React2P4IM0Nshell 💥Extension Tool para...
Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator
A High severity Unsafe Deserialization vulnerability exists in the airflow.providers.http package. The HttpOperator uses pickle.loads to deserialize untrusted data received from the Triggerer service via the database in the executecomplete method. This allows an attacker who has gained write acce...
Exploit for Deserialization of Untrusted Data in Facebook React
R2SHELL !WARNING Este proyecto es SOLO PARA PROPÓSITO...
Exploit for Deserialization of Untrusted Data in Facebook React
📌 CVE-2025-55182 — React2Shell Critical Unauthenticated Remote...
EUVD-2025-203223
The Doubly – Cross Domain Copy Paste for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.46 via deserialization of untrusted input from the content.txt file within uploaded ZIP archives. This makes it possible for authenticated...
EUVD-2025-203263
A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55184 React Server Components 19.0.0 to 19.2.1 includ...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Hybrid Security Scanner !Telegramhttps://i...
Exploit for Deserialization of Untrusted Data in Facebook React
⚛️ React2Shell Exploit CVE-2025-55182 !Severityhttps://i...
CVE-2025-14606
A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...
CVE-2025-14476
The Doubly – Cross Domain Copy Paste for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.46 via deserialization of untrusted input from the content.txt file within uploaded ZIP archives. This makes it possible for authenticated...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Lab A hands-on lab to exploit CVE-2025-55182...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the Decode function which runs pickle.loadsdecoded without isolation. An attacker can execute arbitrary code or manipulate application data by providing crafted serialized input. Details Serializati...