twittodon 安全漏洞

twittodon is a website page for to3k individual developers. A security vulnerability exists in twittodon b1c58a7d1dc664b38deb486ca290779621342c0b, which stems from improper deserialization of the obj parameter in the download.php script, which could lead to a denial of service attack...

CSLA .NET 代码问题漏洞

CSLA .NET is an open source software development framework from Marimer LLC. It helps users build reusable and maintainable object-oriented business layers for applications. A code issue vulnerability exists in CSLA .NET 5.5.4 and prior versions that stems from improper deserialization and could...

EUVD-2020-3103

Malware in sbrugna...

EUVD-2020-3105

Malware in sbrugna...

EUVD-2020-3102

Malware in sbrugna...

EUVD-2016-0411

Malware in sbrugna...

EUVD-2020-3104

Malware in sbrugna...

EUVD-2022-5015

Malicious code in bioql PyPI...

Palo Alto Networks Checkov 安全漏洞

Palo Alto Networks Checkov is a code static analysis tool from Palo Alto Networks, Inc. A security vulnerability exists in Palo Alto Networks Checkov versions prior to 3.2.415 that stems from improper deserialization and could lead to the execution of arbitrary code...

ModelCache 安全漏洞

ModelCache is a codefuse-ai open source LLM semantic caching system designed to enhance user experience by caching query results to reduce response time. A security vulnerability exists in ModelCache v0.2.0 and earlier versions, which stems from improper deserialization of /manager/datamanager.py...

org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

WordPress plugin Friends 代码问题漏洞

WordPress Friends plugin is a plugin for social interaction. WordPress Friends plugin has a code issue vulnerability that stems from improper deserialization of the queryvars parameter, which can be exploited by an attacker to cause code execution...

CVE-2020-10658

The Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.9.1 contains a vulnerability in the ITM application server's WriteImage API. The vulnerability allows an anonymous remote attacker to execute arbitrary code with local administrator privileges. The vulnerability is...

CVE-2020-10657

The Proofpoint Insider Threat Management Server formerly ObserveIT Server before 7.9.1 contains a vulnerability in the ITM web console's ImportAlertRules feature. The vulnerability allows a remote attacker with admin or config-admin privileges in the console to execute arbitrary code with local...

CVE-2025-2251 Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

CVE-2025-2251 Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

CVE-2025-2251

CVE-2025-2251 is an issue in Red Hat JBoss EAP 7.4.x/WildFly where the EJB remote invocation path deserializes untrusted data via JBoss Marshalling, allowing remote code execution without authentication. Red Hat advisories RHSA-2025:10925 and related notices enumerate this vulnerability among sev...

Remote Code Execution (RCE)

Apache Ignite is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper deserialization due to the configured Class Serialization Filters being ignored for some Ignite endpoints, allowing an attacker to send a maliciously crafted message that executes arbitrary code on the...

CVE-2024-45167

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

CVE-2024-45167

The UCI IDOL 2 (also known as uciIDOL or IDOL2 ) management system is vulnerable in versions through 2.12 due to improper input validation, improper deserialization, and improper restriction of operations within memory buffer bounds. A specific XmlMessage document can trigger 100% CPU consumption...