PT-2025-16925

Name of the Vulnerable Software and Affected Versions VisiCut version 2.1 Description The issue is related to insecure deserialization, where VisiCut 2.1 allows stack consumption via an XML document with nested set elements. This can be demonstrated by a java.util.HashMap StackOverflowError when...

PT-2025-10599 · Visicut · Visicut

Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue allows code execution via insecure XML deserialization in the loadPlfFile method of VisicutModel.java. Recommendations: For VisiCut version 2.1, consider restricting the use of the loadPlfFile method...

CVE-2025-25940

VisiCut version 2.1 is vulnerable to code execution due to Insecure XML Deserialization (CWE-502) within the loadPlfFile method of VisicutModel.java. This flaw allows an attacker to execute arbitrary code on the system. As a mitigation, it is recommended to restrict the use of the loadPlfFile met...