Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Security Intel Hub 556— Search: 反序列化×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Clear
Examples: RCE · SSRF · GHSA · log4j
Filter
Clipboard deserialization global-buffer-overflow · Advisory · deskflow/deskflow · GitHub
github.com · 2026-04-25

### Vulnerability Overview - **Vulnerability Name**: Clipboard deserialization global-buffer-overflow - **Vulnerability Type**: Remote memory safety vulnerability, specifically a global buffer overflo…

Read more
Apache Camel Mina Unsafe Deserialization RCE (CVE-2026-40473)
camel.apache.org · 2026-04-27

# Apache Camel Security Advisory: CVE-2026-40473 ## Vulnerability Overview - **Severity**: Medium - **Summary**: An insecure deserialization vulnerability exists in the `MinaConverter.toObjectInput()`…

Read more
Apache Camel JMS Deserialization RCE Vulnerability (CVE-2026-40860) Advisory
camel.apache.org · 2026-04-27

# Apache Camel Security Advisory: CVE-2026-40860 ## Vulnerability Overview Apache Camel contains an insecure JMS deserialization vulnerability. When the `mapJmsMessage` option is enabled (enabled by d…

Read more
Apache Camel CVE-2026-40858 Unsafe Deserialization Vulnerability Advisory
camel.apache.org · 2026-04-27

# Apache Camel Security Advisory: CVE-2026-40858 ## Vulnerability Overview - **Severity**: High - **Summary**: An insecure deserialization vulnerability exists in the Camel-Infinispan component. - **D…

Read more
CVSS 5.3
Cista v0.15 Unsafe Deserialization Memory Address Leak
gist.github.com · 2026-04-29

# Vulnerability Summary: Cista v0.15 Deserialization Memory Address Leak ## Vulnerability Overview In Cista v0.15 and earlier versions, there is an insecure deserialization issue. When deserializing u…

Read more
CVSS 5.0
Grav CMS Insecure Deserialization in File Cache (CWE-502)
github.com · 2026-04-29

# Vulnerability Summary: Insecure Deserialization in File Cache ## Vulnerability Overview * **Vulnerability Name**: Insecure Deserialization in File Cache * **Severity**: High * **Vulnerability Type**…

Read more
Jenkins Security Advisory: Multiple Plugin Vulnerabilities including RCE, XSS, and Deserialization (CVE-2026-42519 to 42
www.jenkins.io · 2026-04-29

# Jenkins Security Advisory 2026-04-29 Vulnerability Summary ## Vulnerability Overview This advisory covers security vulnerabilities in multiple Jenkins plugins, primarily including missing permission…

Read more
Jenkins Security Advisory: Multiple Plugin Vulnerabilities including RCE, XSS, and Deserialization (CVE-2026-42519 to 42
www.jenkins.io · 2026-04-29

# Jenkins Security Advisory 2026-04-29 Vulnerability Summary ## Vulnerability Overview This advisory covers security vulnerabilities in multiple Jenkins plugins, primarily including missing permission…

Read more
Jenkins Security Bulletin: Multiple Plugin Vulnerabilities (SECURITY-3662/3672/3676/3702/3704/3706/3760)
www.jenkins.io · 2026-04-29

# Jenkins Security Advisory 2026-04-29 Vulnerability Summary ## Vulnerability Overview This advisory covers security vulnerabilities in multiple Jenkins plugins, primarily including missing permission…

Read more
Premium intel
CVSS 6.3
Fix Unsafe Pickle Deserialization RCE in FAISS Vector Store
github.com · 2026-05-02

### Vulnerability Overview - **Vulnerability Name**: Unsafe Pickle Deserialization in FAISS Vector Store - **Vulnerability Type**: Remote Code Execution (RCE) - **Vulnerability Description**: In the `…

Read more
Premium intel
CVSS 6.3
mem0 Unsafe Deserialization RCE via pickle.load in FAISS Index
github.com · 2026-05-02

# [Security] Code Execution via Unsafe Deserialization #3778 ## Vulnerability Overview In the `mem0` project, the use of the insecure `pickle.load()` function for deserialization leads to a Remote Cod…

Read more
Premium intel
CVSS 6.3
mem0 FAISS Vector Store Pickle Deserialization RCE Vulnerability and Fix
github.com · 2026-05-02

# Vulnerability Summary ## Vulnerability Overview - **Vulnerability Name**: Arbitrary Code Execution via Pickle in FAISS Vector Store - **Vulnerability Description**: There is a risk of arbitrary code…

Read more
LINQPad BinaryFormatter Deserialization Vulnerability Analysis
trustedsec.com · 2026-05-08

# Vulnerability Summary: LINQPad Deserialization Vulnerability ## Vulnerability Overview A deserialization vulnerability has been discovered in LINQPad, a popular .NET development tool. The vulnerabil…

Read more
Ray Parquet Extension Type Deserialization RCE
github.com · 2026-05-09

# Vulnerability Summary: Parquet Arrow Extension Type Deserialization Remote Code Execution ## Overview When reading Parquet files, the Ray data platform registers custom Arrow extension types (such a…

Read more
Ray RCE: Arbitrary Code Execution via Arrow Extension Type Deserialization
github.com · 2026-05-09

# [Data] Fix RCE in Arrow extension type deserialization from Parquet #62056 ## Vulnerability Overview - **Vulnerability Type**: Remote Code Execution (RCE) - **Root Cause**: During the deserializatio…

Read more
CVE-2026-31218 Insecure Deserialization RCE in optimate via torch.load
www.notion.so · 2026-05-22

# CVE-2026-31218 Vulnerability Summary ## Vulnerability Overview - **CVE ID**: CVE-2026-31218 - **Vulnerability Type**: Insecure Deserialization (CWE-502) - **Affected Component**: `neural_magic_train…

Read more
Premium intel
CVSS 9.8
Python jsonpickle <= 2.0.0 RCE via py/repr Deserialization
www.vulncheck.com · 2026-05-22

# python jsonpickle 2.0.0 Remote Code Execution Vulnerability ## Vulnerability Overview - **Vulnerability Name**: python jsonpickle 2.0.0 Remote Code Execution via py/repr - **Severity**: CRITICAL - *…

Read more
CVSS 5.3
WordPress Plugin slek-gateway-for-woocommerce Unsafe Deserialization Vulnerability Analysis
plugins.trac.wordpress.org · 2026-05-22

# Vulnerability Summary ## Overview The attached screenshot displays the source code of the `slek-gateway-for-woocommerce` plugin in the WordPress plugin directory. The code contains an **unsafe deser…

Read more
CVSS 5.3
Analysis of Unsafe Deserialization Vulnerability in WordPress slek-gateway-for-woocommerce Plugin
plugins.trac.wordpress.org · 2026-05-22

# Vulnerability Summary ## Overview This webpage displays the source code of the WordPress plugin `slek-gateway-for-woocommerce`. The code contains an **unsafe deserialization vulnerability** (Unseria…

Read more
Premium intel
CVSS 7.6
AutoGPT Redis pickle Deserialization RCE (CVE-2026-33233)
github.com · 2026-05-22

# Vulnerability Summary: Unsafe Redis Cache Deserialization in AutoGPT ## Vulnerability Overview **Vulnerability Name**: Unsafe Redis Cache Deserialization (`pickle.loads`) allowing Backend RCE **CVE …

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.