Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Security Intel Hub 553— Search: 反序列化×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Clear
Examples: RCE · SSRF · GHSA · log4j
Filter
Premium intel
CVSS 7.5
e107 Deserialization CVE-2026-5759 Secondary RCE via eval()
github.com · 2026-07-30

### Vulnerability Overview **Vulnerability Name**: Secondary Code Execution via Deserialization in `e107::unserialize()` using `eval()` **Vulnerability Description**: - The `e107` `array` deserializer…

Read more
Premium intel
CVSS 9.8
Summary of Critical Vulnerabilities in Multiple OA Systems (File Upload/Deserialization/RCE)
cn-sec.com · 2026-08-08

### Vulnerability Overview This webpage summarizes multiple vulnerabilities discovered in various OA systems (such as Weaver, Yonyou, and certain other providers like "Shikong" and "Ling") in July 202…

Read more
Harden Composer checkpoint deserialization (#3937) · mosaicml/composer@6405188 · GitHub
github.com · 2026-06-27

### Vulnerability Overview This vulnerability involves a deserialization issue within the Composer library. Specifically, when loading checkpoint files, deserialized data was not strictly restricted, …

Read more
[Data] Gate unsafe deserialization in WebDataset default decoder by bveeramani · Pull Request #63469 · ray-project/ray ·
github.com · 2026-07-02

### Vulnerability Overview An insecure deserialization vulnerability exists in the default decoder of `WebDataset` in the `ray-project/ray` project. This vulnerability allows attackers to execute arbi…

Read more
CVE-2022-2265 Replicant Insecure Deserialization RCE
morielharush.github.io · 2026-04-02

# Replicant: When Deserialization Starts Writing Your Scripts ## Vulnerability Overview **Replicant** is an npm package for advanced JavaScript serialization and deserialization. This vulnerability (C…

Read more
CVSS 5.3
MetaGPT Unsafe Deserialization RCE in Message.check_instruct_content with POC
github.com · 2026-06-02

### Vulnerability Overview **Title**: [Security] Unsafe deserialization in Message.check_instruct_content() leads to code execution #2038 **Description**: The `metagpt/schema.py:Message.check_instruct…

Read more
CVSS 6.5
Apache ActiveMQ CVE-2023-46604 RCE Vulnerability Analysis and Mitigation
www.wordfence.com · 2026-05-08

# Vulnerability Summary ## Overview * **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) * **Vulnerability Type**: Remote Code Execution (RCE) * **Cause**: Th…

Read more
Pivotal CRM Unsafe Deserialization Vulnerability (CWE-502) Advisory and Patch Guide
timtimxs.github.io · 2026-06-27

### Vulnerability Overview - **Vulnerability Name**: Insecure Deserialization (CWE-502) - **Vulnerability Description**: This vulnerability involves insecure deserialization in Pivotal version 6.6.04.…

Read more
Apache Camel Unsafe Java Deserialization Vulnerability (CVE-2026-40859)
camel.apache.org · 2026-07-06

### Vulnerability Overview **CVE-2026-40859** - **Severity**: Medium - **Summary**: Unsafe Java deserialization exists in the Camel-Vertx-Http and Camel-Netty-Http components when `transferException` …

Read more
Red Hat JBoss EAP 6.4.20 Security Update (RHSA-2018:1450)
access.redhat.com · 2025-11-11

### Vulnerability Key Information - **Announcement ID**: RHSA-2018:1450 - **Release Date**: 2018-05-14 - **Update Date**: 2018-05-14 - **Type/Severity**: Important - **Subject**: Red Hat JBoss Enterpr…

Read more
Apache ActiveMQ CVE-2023-46604 RCE Vulnerability Summary
go.dev · 2026-05-22

# Vulnerability Summary ## Vulnerability Overview **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) **Vulnerability Description**: Apache ActiveMQ is a popul…

Read more
CVSS 6.1
Remix v2 Framework Hydration Error Deserialization Flaw and Fix
github.com · 2026-07-28

### Vulnerability Overview This vulnerability involves error handling issues that occur during the hydration process. Specifically, the manual serialization method in older versions of Remix v2 has a …

Read more
CVSS 6.3
vLLM CVE-2025-62164 remediation bypass via concurrent prompt embeds
github.com · 2026-08-14

# Vulnerability Overview - **Vulnerability Name**: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts - **CVE ID**: CVE-2025-73557 - **Severity**: Moderate - **Affected V…

Read more
Premium intel
CVSS 7.5
openITCOCKPIT v5.3.1 Unsafe PHP Deserialization Vulnerability Analysis
github.com · 2026-02-21

# Critical Vulnerability Summary ## Affected Products and Versions - **Product**: openITCOCKPIT Community Edition - **Version**: v5.3.1 ## Vulnerability Category - Insecure Deserialization - PHP Objec…

Read more
Premium intel
CVSS 7.3
Bitser v5.2.4 Unsafe Deserialization Vulnerability Analysis with POC
gist.github.com · 2026-05-26

### Vulnerability Overview An insecure deserialization vulnerability has been discovered in Bitser v5.2.4 and earlier versions. This vulnerability allows type confusion, which can lead to address leak…

Read more
Apache Fury/PyFury Deserialization Bypass and RCE Vulnerabilities (CVE-2026-50076/48207) Advisory
fory.apache.org · 2026-06-13

### Vulnerability Overview Apache Fury contains multiple security vulnerabilities, primarily involving bypasses of deserialization checks and denial of service (DoS) issues. ### Affected Versions 1. *…

Read more
CVE-2024-12484 Keras TorchModuleWrapper Unsafe Deserialization RCE
huntr.com · 2026-07-20

### Vulnerability Overview **Vulnerability Name**: Unsafe Deserialization in Public `keras.layers.TorchModuleWrapper.from_config` Reaches `torch.load(weights_only=False)` Without Explicit Unsafe Opt-I…

Read more
www.wordfence.com · 2026-05-05

# Vulnerability Summary ## Vulnerability Overview **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) **Description**: Apache ActiveMQ is an open-source messag…

Read more
CVSS 3.7
NutzBoot LiteRPC Unauthenticated Java Deserialization RCE
github.com · 2025-12-04

### Key Information Extraction #### Affected Products - NutzBoot (LiteRPC + Loach modules) #### Version Information - **Affected Versions**: 2.6.0-SNAPSHOT (current dev branch, check specific commits …

Read more
Premium intel
CVSS 8.1
Zumba JsonSerializer Unsafe Deserialization Fix
github.com · 2026-02-21

# Critical Vulnerability Information ## Vulnerability Description In the `Zumba\JsonSerializer` library, there is an **insecure deserialization vulnerability** that could lead to Remote Code Execution…

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.