1975 matches found
Remote Code Execution (RCE)
Horovod is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, which ultimately leads to insecure deserialization via cloudpickle.loadsdecoded. It allows an attacker to send a malicious pickle object...
VulnCheck KEV: CVE-2025-27218
Sitecore Experience Manager XM and Experience Platform XP 10.4 before KB1002844 allow remote code execution through insecure deserialization...
Applio 路径遍历漏洞
Applio is an open source AI speech conversion tool from Spanish AI Hispano. A path traversal vulnerability exists in Applio 3.2.8-bugfix and prior versions, which stems from an arbitrary file write issue in train.py, and could lead to the writing of arbitrary files on the Applio server, or in...
Applio 代码问题漏洞
Applio is an open source AI voice conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.8-bugfix and prior versions, which stems from an insecure deserialization issue in infer.py that could lead to remote code execution...
Applio 代码问题漏洞
Applio is an open source AI speech conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.8-bugfix and prior versions, which stems from an insecure deserialization issue in modelblender.py that could lead to remote code execution...
Applio 代码问题漏洞
Applio is an open source AI voice conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.8-bugfix and earlier versions, which stems from an insecure deserialization issue in inference.py that could lead to remote code execution...
Applio 代码问题漏洞
Applio is an open source AI speech conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.8-bugfix and prior versions, which stems from an insecure deserialization issue in modelinformation.py that could lead to remote code execution...
vLLM 代码问题漏洞
vLLM is a high throughput and memory efficient inference and service engine for LLM from the vLLM open source. A code issue vulnerability exists in vLLM that stems from insecure deserialization in the Mooncake configuration that could lead to remote code execution...
Arbitrary Code Execution (ACE)
Keras is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to insecure deserialization, where the Model.loadmodel function processes a malicious .keras archive, allowing arbitrary Python modules and functions to be executed by modifying the config.json file...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
PT-2025-10644
Name of the Vulnerable Software and Affected Versions Nintex Automation versions 5.6 through 5.7 Description The issue concerns insecure deserialization of user input. Recommendations For versions 5.6 and 5.7, update to version 5.8 or later to resolve the issue...
CVE-2025-27925
Nintex Automation versions 5.6 and 5.7, prior to 5.8, are affected by insecure deserialization of user input. The CVE-2025-27925 entry describes a vulnerability in Nintex Automation with impact across confidentiality, integrity, and availability (per CVSS scores: high- to critical-severity ranges...
CVE-2025-27925
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input...
CVE-2025-27816
A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows PluginHost service, which runs on all the servers where...
CVE-2025-27816
A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows PluginHost service, which runs on all the servers where...
CVE-2025-27816
CVE-2025-27816 is a vulnerability in Arctera InfoScale 7.0–8.0.2 where insecure deserialization of untrusted messages in a .NET remoting endpoint can be exploited via the Windows Plugin_Host service (used when Disaster Recovery is configured). The DR Wizard-enabled deployment exposes this endpoin...