CVE-2026-63767 ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can...

CVE-2021-22055

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries...

Code injection

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries...

CVE-2021-22055

The SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the package parameter. Attackers can also insert malicious data and fake entries...

CVE-2021-22055

CVE-2021-22055 affects the SchedulerServer component of VMware Photon. The vulnerability allows remote attackers to inject logs via a carriage return character in the package parameter, and to insert malicious data and fake entries. The available connected Red Hat/NVD entries confirm the same des...

Vmware photon 注入漏洞

Vmware Photon is a container-optimized cloud platform from US-based Vmware. A security vulnerability exists in SchedulerServer in Vmware photon that allows a remote attacker to inject logs via the package parameter in the inject logs. An attacker could also insert malicious data and fake entries...