CVE-2025-47292

Cap Collectif's CVE-2025-47292 describes an insecure deserialization flaw in the DebateAlternateArgumentsResolver, where deserializing a Cursor can be controlled by an unauthenticated user and lead to Remote Code Execution. Affected software is Cap Collectif prior to the commit 812f2a7d271b76deab...

CVE-2024-53477

JFinal CMS 5.1.0 is vulnerable to Command Execution via unauthorized execution of deserialization in the file ApiForm.java...