CVE-2025-53691 Sitecore Experience Remote Code Execution through Insecure Deserialization

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager XM, Sitecore Experience Platform XP allows Remote Code Execution RCE.This issue affects Experience Manager XM: from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform XP: from 9.0 through 9.3, from 10.0 throu...

Exploit for CVE-2025-53691

CVE-2025-53691: Remote code execution RCE through insecure...

Linux Distros Unpatched Vulnerability : CVE-2024-35515

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code. CVE-2024-35515 Note that Nessus relies on the presence of the...

Exploit for CVE-2025-49113

CVE-2025-49113 – Roundcube Remote Code Execution RCE PoC Th...

Delta Electronics DTN Soft Code Execution Vulnerability

Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A security vulnerability exists in Delta Electronics DTN due to an insecure deserialization flaw in the handling of project files. An attacker can exploit the vulnerability to execute arbitrary code on t...

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and achieve remote code...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CVE-2025-8875 Insecure Deserialization Vulnerability

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1...

Vulnerabilities fixed in N-able N-Central

N-able has fixed vulnerabilities in N-Central. The vulnerabilities include insecure deserialization that poses the risk of command execution, and command injection that stems from improper sanitization of user input. An attacker could exploit these vulnerabilities to execute unauthorized commands...

PT-2025-33361 · Undefined · Undefined

- CVE-2025-8875 is an insecure deserialization vulnerability that could lead to command execution - CVE-2028-8876 is a command injection vulnerability via improper sanitization of user input...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CVE-2025-34153

CVE-2025-34153 affects Hyland OnBase versions prior to 17.0.2.87. The vulnerability arises from insecure deserialization on the .NET Remoting TCP channel, where a listener on port 6031 (TimerServer, Hyland.Core.Timers.dll) deserializes untrusted input via BinaryFormatter, allowing unauthenticated...

CVE-2025-34153 Hyland OnBase < 17.0.2.87 .NET Remoting TCP Channel Unauthenticated RCE

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CVE-2025-34153

Hyland OnBase versions prior to 17.0.2.87 other versions may be affected are vulnerable to unauthenticated remote code execution via insecure deserialization on the .NET Remoting TCP channel. The service registers a listener on port 6031 with the URI endpoint TimerServer, implemented in...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-8875link is external N-able N-central Insecure Deserialization Vulnerability CVE-2025-8876link is external N-able N-central Command Injection Vulnerability...

N-able N-Central Insecure Deserialization Vulnerability

N-able N-Central contains an insecure deserialization vulnerability that could lead to command execution...

CVE-2025-55136

ERC aka Emotion Recognition in Conversation through 0.3 has insecure deserialization via a serialized object because jsonpickle is used...

CVE-2025-55136

ERC aka Emotion Recognition in Conversation through 0.3 has insecure deserialization via a serialized object because jsonpickle is used...

CVE-2025-55136

ERC (Emotion Recognition in Conversation) up to version 0.3 is affected by insecure deserialization via jsonpickle when handling serialized objects. The vulnerability arises from unsafe deserialization in the serialization path. Public mentions in Red Hat, NVD, OSV, and PT-Security records confir...

PT-2025-32270 · Erc · Erc

Name of the Vulnerable Software and Affected Versions: ERC aka Emotion Recognition in Conversation versions through 0.3 Description: ERC aka Emotion Recognition in Conversation is susceptible to insecure deserialization due to the use of jsonpickle when handling serialized objects. Recommendation...