Search Vulnerabilities

Fluent Forms Pro Add On Pack <= 6.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change via User Meta Field

Microsoft M365 Copilot Remote Code Execution Vulnerability

C-CURE 9000 and Victor application server - Deserialization of Untrusted Data

WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability

WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability

WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability

Remote Code Execution in fastjson 1.2.68–1.2.83

PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX

NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data

Apache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interface

Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths

ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master...

Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config

Disk Cache Deserialization Remote Code Execution Vulnerability

Pimcore: Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data

NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unau...