CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Forschungs-Repository vonSentinelX — nur für autorisierte Sicherheitstests und defensive Zwecke. Übersicht Feld| Detail ---|--- CVE ID| CVE-2026-44963 Anbieter| Veeam Produkt| Backup & Replication Betroffene Versionen| 12.3.2.4854 alle v12-Builds...

CVE-2023-6933

Einführung in die CVE-2023-6933-Schwachstelle Beschreibung Das Plugin „Better Search Replace“ für WordPress weist eine kritische Schwachstelle auf, die als PHP-Object-Injection bekannt ist. Dieser Sicherheitsfehler ist in allen Versionen bis einschließlich 1.4.4 vorhanden. Er entsteht durch die...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Nicht vertrauenswürdige Deserialisierung RCE PoC ⚠️ Nur für Lab / Selbstbewertung. Verwenden Sie nur auf Systemen, die Ihnen gehören oder für die Sie autorisiert sind zu testen. Dieses Repository bietet: Ein minimales PoC-Skript zur Reproduktion von CVE-2017-5941...

CVE-2025-53770

مشروع كشف CVE-2025-53770 مجموعة أدوات شاملة لكشف الثغرات الأمنية لتحديد الأنظمة المعرضة لثغرة CVE-2025-53770 CWE-502: إلغاء تسلسل البيانات غير الموثوقة. 🔍 نظرة عامة يوفر هذا المشروع نصوصًا برمجية للكشف جاهزة للمؤسسات لتحديد وتقييم الأنظمة التي قد تكون معرضة لثغرة CVE-2025-53770، وهي ثغرة أمنية...

RCE-NodeJs

node-serialize — CVE-2017-5941 Hinweis: Dieses Dokument dient nur zu Verteidigungs- und Bildungszwecken. Es enthält keine Anleitungen zur Erstellung von Exploits oder RCE. Zusammenfassung: node-serialize 0.0.4 und ähnliche veraltete Versionen kann aufgrund unsicherer Deserialisierung ein Risiko...

CVE-2026-77646

A Server-Side Request Forgery SSRF vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data...

PT-2026-70699

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

PT-2026-70704

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...

CVE-2026-64606

Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected This issue affects Apache Fory: from before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the...

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version v12.1.1.1 Vulnerability Details CVEID:CVE-2026-42342 DESCRIPTION: React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certai...

CVE-2026-43825

Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versions Affected: before 3.0.0-M4 libsvm document categorization module; introduced in OPENNLP-1808 and only present on the 3.x line Description: SvmDoccatModel.deserializeInputStream reads an attacker-controlled stream with...

PT-2026-55895

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.18.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.x Description Deserialization of untrusted data in the Apache Camel PQC component occurs when HashicorpVaultKeyLifecycleManager,...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the runautogradprof function. An attacker can execute arbitrary code by crafting a malicious pickle file...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the VariableFrontend or Registry. An attacker can execute arbitrary PHP code by injecting a crafted serialized payload into the underlying storage backend, such as the cache store or sysregistry...

CVE-2026-24221

NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure...

WordPress plugin Askka 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

CVE-2026-9319 IBM WebSphere Application Server is affected by a remote code execution vulnerability

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data from LDAP referrals. An attacker can execute arbitrary code or perform unauthorized actions by supplying crafted LDAP referral data. Details Serialization is a process of converting an object into a...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the JmsBinding.extractBodyFromJms function in camel-jms and it's equivalents in camel-sjms that does not apply any ObjectInputFilter. An attacker can execute arbitrary code by sending a crafted JMS...

CVE-2026-41409 Apache MINA: CWE-502 Deserialization of Untrusted Data

The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...