3 matches found
PT-2025-16925 · Visicut · Visicut
Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue is related to insecure deserialization, where VisiCut 2.1 allows stack consumption via an XML document with nested set elements. This can be demonstrated by a java.util.HashMap StackOverflowError whe...
PT-2025-10599 · Visicut · Visicut
Name of the Vulnerable Software and Affected Versions: VisiCut version 2.1 Description: The issue allows code execution via insecure XML deserialization in the loadPlfFile method of VisicutModel.java. Recommendations: For VisiCut version 2.1, consider restricting the use of the loadPlfFile method...
CVE-2025-25940
VisiCut version 2.1 is vulnerable to code execution due to insecure XML deserialization in the loadPlfFile method of VisicutModel.java. Proof-of-concept (PoC) exploitation has been publicly observed. As a remediation, it is recommended to restrict the use of the loadPlfFile method in VisicutModel...