CVE-2025-32363

mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data...

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

mediDOK 代码注入漏洞

mediDOK is an image and document archiving tool for medical practices from mediDOK, Germany. A security vulnerability exists in mediDOK versions prior to 2.5.18.43 that originates from deserializing untrusted data and could lead to remote code execution...

CVE-2025-32363

mediDOK before 2.5.18.43 allows remote attackers to achieve remote code execution on a target system via deserialization of untrusted data...

CVE-2025-32363

Affected software: mediDOK prior to 2.5.18.43. Vulnerability: remote code execution via deserialization of untrusted data. Impact: high (per CVSS 3.1 vector shows critical severity). Root cause: untrusted data deserialization leading to code execution. Evidence from connected docs: multiple sourc...

CVE-2025-30384

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

CVE-2025-30378

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

CVE-2025-30382

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

CVE-2025-29842

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-29842

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...

UrlMon Security Feature Bypass Vulnerability

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

Remote Code Execution (RCE)

vllm is vulnerable to Remote Code Execution RCE. The vulnerability is due to the use of Python’s pickle module on untrusted data received over a ZeroMQ SUB socket in multi-node deployments using the V0 engine, which allows an attacker to execute arbitrary code on the target machine and potentiall...

PT-2025-20957 · Microsoft · Urlmon +1

Name of the Vulnerable Software and Affected Versions: UrlMon affected versions not specified Description: The issue allows an unauthorized attacker to bypass a security feature over a network by accepting extraneous untrusted data with trusted data in UrlMon. This enables attackers to affect the...

PT-2025-20989 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue concerns the deserialization of untrusted data, which allows an unauthorized attacker to execute code locally. This enables remote attackers to execute arbitra...

CVE-2025-46738 Deserialization of Untrusted Data

An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code...

CVE-2025-46738 Deserialization of Untrusted Data

An authenticated attacker can maliciously modify layout data files in the SEL-5033 installation directory to execute arbitrary code...

CVE-2025-47271

The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects...

CVE-2025-47271 OZI-Project/ozi-publish Code Injection vulnerability

The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects...

OZI-publish 安全漏洞

OZI-publish is an OZI Project open source project. A security vulnerability exists in OZI-publish versions 1.13.2 through 1.13.5, which stems from untrusted data flowing into the PR creation logic and could lead to the execution of arbitrary code...