PT-2026-53609

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server...

EUVD-2016-1940

Malware in sbrugna...

CVE-2016-10949

The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization...

CVE-2020-15188

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution RCE. The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed...

CVE-2016-10949

The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization...

CVE-2016-10949: Improper Neutralization of Special Elements used in an SQL Command

The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization...

PT-2019-7742

Name of the Vulnerable Software and Affected Versions Relevanssi Premium plugin versions prior to 1.14.6.1 Description The issue concerns SQL injection with resultant unsafe unserialization. Recommendations For versions prior to 1.14.6.1, update to version 1.14.6.1 or later to resolve the issue...

Arbitrary File Deletion

PEAR/ArchiveTar is vulnerable to arbitrary file deletion. The vulnerability exists when extracting a file with phar:// prefix, allowing unsafe unserialization of gadgets to cause arbitrary file deletion...