CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

CVE-2025-63950

The to3k Twittodon application is vulnerable to an insecure deserialization flaw in the download.php script (versions prior to commit b1c58a7d1dc664b38deb486ca290779621342c0b). The obj parameter accepts base64-encoded data which is passed directly to the unserialize() function without proper vali...

EUVD-2017-10013

Malware in sbrugna...