CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

CVE-2025-63950

The to3k Twittodon application is vulnerable to an insecure deserialization flaw in its download.php script through commit b1c58a7d1dc664b38deb486ca290779621342c0b (2023-02-28). The obj parameter accepts base64-encoded data and passes it directly to the unserialize() function without validation. ...

EUVD-2017-10013

Malware in sbrugna...