Search Vulnerabilities

Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE

Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE

Azure Core shared client library for Python Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool

LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization

Spectrum insecure deserialiation

Fickling vulnerable to detection bypass due to "builtins" blindness

Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling Blocklist Bypass: cProfile.run()

Fickling has a bypass via runpy.run_path() and runpy.run_module()

WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

Bio-Formats <= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files

WordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection Vulnerability

WordPress DZS Video Gallery plugin <= 12.25 - PHP Object Injection vulnerability

WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

milvus HTTP Endpoint expr.go expr.Exec deserialization

PluXml Media Management medias.php __destruct deserialization

Arbitrary Code Execution in feast-dev/feast