Search Vulnerabilities

BIG-IP and BIG-IQ Configuration utility vulnerability

coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Nexus Repository 3 - Improper LDAP Referral Handling

Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization

Insecure deserialization

User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Obje...

ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load

MindsDB Pickle pickle.loads deserialization

Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection

mem0ai mem0 faiss.py pickle.dump deserialization

Apache MINA: CWE-502 Deserialization of Untrusted Data (take 2)

Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE (take 2)

Arbitrary Code Execution via Unsafe Deserialization in LabOne Q