9850 matches found
cve-2020-8165-demo
Demostración de CVE-2020-8165 Otra demostración más de CVE-2020-8165, aunque con una implementación más realista que la mayoría. Antecedentes CVE-2020-8165 Existe una vulnerabilidad de deserialización de datos no confiables en rails 5.2.4.3, rails 6.0.3.1 que puede permitir a un atacante...
CVE-2024-24590
CVE-2024-24590 Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with. Usage 1. paste the credentials given and run...
CVE-2016-5983
CVE-2016-5983 IBM WebSphere deserialización de datos no confiables - IBM WebSphere 7,8,8.5,9 Enlace a la fuente original del informe: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Título: IBM WebSphere deserialización de datos no confiabl...
CVE-2026-58025
CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...
CVE-2024-29847
CVE-2024-29847 PoC para la vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en AgentPortal de Ivanti Endpoint Manager CVE-2024-29847 Un análisis de causa raíz de la vulnerabilidad se puede encontrar en mi blog:...
CVE-2026-62044
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...
CVE-2026-104398
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10...
CVE-2026-104398 WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10...
CVE-2026-104398
The VillaTheme AFFI – Affiliate Marketing for WooCommerce WordPress plugin is vulnerable to a PHP Object Injection flaw due to the deserialization of untrusted data in the affi-affiliate-marketing-for-woo component. This issue affects versions from n/a through 1.0.10 . Exploitation of this vulner...
EUVD-2026-96374
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13...
CVE-2026-62044
The bPlugins Super Video Player WordPress plugin (versions ≤ 1.8.13 ) is vulnerable to a PHP Object Injection flaw. This issue stems from the Deserialization of Untrusted Data , which can allow an attacker to inject objects into the application. The impact includes high levels of risk to confiden...
CVE-2024-11394
CVE-2024-11394 Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en el modelo Trax de Hugging Face Transformers Descripción general y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona al...
CVE-2026-94676
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
CVE-2026-105885
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...
CVE-2026-94676 WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
EUVD-2026-96323
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0...
CVE-2026-94676
The Tainacan Community Tainacan WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This vulnerability affects versions from n/a through 1.3.0 . An attacker could potentially exploit this to perform unauthorized actions. No specific exploit links ...
CVE-2026-105885 WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62...