Security Intel Hub 553— Search: `反序列化`×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

TensorFlow Keras Deserialization Bypass Safe Mode for RCE

jfrog.com · 2025-08-12

From this webpage screenshot, the following key information about the vulnerability can be extracted: - **Title**: Is TensorFlow Keras "Safe Mode" Really Safe? Bypassing Safe Mode for Arbitrary Code E…

Premium intel

CVSS 9.1

Kanboard <=1.2.46 Unsafe Deserialization RCE (CVE-2020-5070)

github.com · 2025-08-13

### Key Information #### Vulnerability Type - **Authenticated Admin Remote Code Execution via Unsafe Deserialization of Events** #### Affected Versions - **Affected versions**: <= 1.2.46 - **Patched v…

Premium intel

CVSS 7.8

NVIDIA NeMo Framework Untrusted Data Deserialization Vulnerability (CVE-2025-23303)

www.cve.org · 2025-08-15

### Critical Vulnerability Information - **CVE ID**: CVE-2025-23303 - **Release Date**: 2025-08-13 - **Update Date**: 2025-08-13 - **CNA**: NVIDIA Corporation #### Description NVIDIA NeMo Framework fo…

Premium intel

CVSS 7.8

NVIDIA NeMo Framework Deserialization & Code Injection Vulnerabilities (CVE-2025-23303/23304)

nvidia.custhelp.com · 2025-08-15

### Critical Vulnerability Information #### Vulnerability Details | CVE ID | Description | Vector | Base Score | Severity | CWE | Impact | |--------|-------------|--------|------------|----------|----…

Android BaseBundle Parcel Unparcel Error Logic Fix

android.googlesource.com · 2025-09-04

### Critical Vulnerability Information - **Commit ID**: ece83fb425b1e912a036e9985b710910e2e3ca37 - **Author**: Steven Moreland - **Committer**: Android Build Co-signature Worker - **Commit Time**: Dec…

FreeScout Unserialization Vulnerability Leading to RCE

github.com · 2025-09-04

### Key Information #### Vulnerability Overview - **Vulnerability Type**: Remote Code Execution (RCE) due to deserialization of untrusted data - **CVE ID**: CWE-502: Deserialization of Untrusted Data …

CVSS 9.8

CVE-2025-35451 Deserialization Vulnerability Affecting Multiple Java Application Servers

www.cve.org · 2025-09-07

### Critical Vulnerability Information - **CVE ID**: CVE-2025-35451 - **CVSS Score**: - Base Score: 9.8 (Critical) - Version: CVSS v3.1 - **Affected Software and Versions**: - Vendor: Apache - Product…

Apache Jackrabbit Untrusted Data Deserialization Vulnerability (CVE-2025-58782)

lists.apache.org · 2025-09-09

### Key Information #### Vulnerability ID CVE-2025-58782 #### Affected Components - Apache Jackrabbit Core - Apache Jackrabbit JCR Commons #### Affected Versions - Apache Jackrabbit Core (org.apache.j…

CVSS 8.8

MonAI CVE-2025-58757 Unsafe Pickle Deserialization RCE

github.com · 2025-09-10

### Critical Vulnerability Information #### Vulnerability Title - **Unsafe use of Pickle deserialization leads to RCE** #### Severity - **CVSS v3 base metrics**: 8.8 / 10 - **Attack vector**: Network …

CVSS 7.8

Beckhoff TwinCAT 3 Engineering Deserialization Vulnerability (CVE-2025-41701)

certvde.com · 2025-09-10

## Critical Vulnerability Information ### Vulnerability ID - VDE-2025-075 ### Release Date - 2025-09-10 10:00 (CEST) ### Last Updated - 2025-09-10 10:36 (CEST) ### Vendor - Beckhoff Automation GmbH & …

CVSS 8.4

CVE-2022-31050: Greenshot Insecure .NET Deserialization via WM_COPYDATA

github.com · 2025-09-18

### Key Information #### Vulnerability Overview - **Vulnerability Name**: Insecure .NET deserialization via WM_COPYDATA enables local code execution - **Affected Versions**: <= 1.3.300 - **Fixed Versi…

Premium intel

CVSS 9.8

CVE-2025-59340: Jinjava JavaType-Based Deserialization Sandbox Bypass

github.com · 2025-09-19

### Key Information #### Vulnerability Overview - **Vulnerability Name**: Sandbox Bypass via JavaType-Based Deserialization - **Severity**: Critical (CVSS v3.1: 9.8/10) - **CVE ID**: CVE-2025-59340 - …

Datart Directory Traversal and SnakeYAML Deserialization RCE (CVE-2025-56815/56816)

github.com · 2025-09-26

### Critical Vulnerability Information #### CVE-2025-56815 - **Vulnerability Type**: Directory Traversal - **Affected Versions**: Datart 1.0.0-rc.3 - **Vulnerability Description**: In the POST /viz/im…

CVSS 6.3

Python pickle Deserialization RCE Vulnerability and PoC Analysis

github.com · 2025-09-26

### Key Information #### Vulnerability Overview - **Vulnerability Type**: Remote Code Execution (RCE) - **Affected Endpoint**: `/calculate` - **Cause**: Unsafe deserialization of user-provided data us…

CVSS 6.3

Python pickle Deserialization RCE Vulnerability and PoC Analysis

github.com · 2025-09-26

### Key Information Summary #### Vulnerability Overview - **Type**: Remote Code Execution (RCE) vulnerability - **Location**: `experiments.robot.bridge.reasoning_server::run_reasoning_server` - **Desc…

CVSS 6.3

Pickle Deserialization RCE in Robot Bridge Reasoning Server with PoC

github.com · 2025-09-26

### Key Information #### Vulnerability Type - **Remote Code Execution (RCE) Vulnerability** #### Affected Code - `experiments.robot.bridge.reasoning_server::run_reasoning_server` #### Vulnerability De…

CVSS 7.3

pmTicket Project-Management-Software Insecure Deserialization Authentication Bypass via Cookie

vuldb.com · 2025-09-29

### Critical Vulnerability Information - **Submission ID**: #657302 - **Title**: pmTicket Project-Management-Software (https://github.com/issue-tracking-system/Project-Management-Software) up to commi…

CVSS 7.3

Authentication Bypass via Insecure Deserialization in loadLanguage

drive.google.com · 2025-09-29

### Key Information #### Vulnerability Type - **Authentication Bypass via Insecure Deserialization (Critical)** #### Vulnerability Description - In the `loadLanguage` function of the `class.main.php` …

CVSS 9.8

Newforma Project Center .NET Unauthorized Deserialization (CVE-2025-35050)

www.cve.org · 2025-10-10

### Critical Vulnerability Information - **CVE ID**: CVE-2025-35050 - **Release Date**: 2025-10-09 - **Update Date**: 2025-10-09 - **Title**: Newforma Info Exchange (NIX) .NET Unauthorized Deserializa…

Kafka-UI v0.7.2 Unsafe Deserialization RCE via Malicious Serde Config

github.com · 2025-10-15

### Critical Vulnerability Information #### Vulnerability Description - **Type**: Unsafe deserialization via malicious Serde configuration (leading to RCE/DoS) - **Location**: Dashboard → "Configure N…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 553— Search: 反序列化×

Security Intel Hub 553— Search: `反序列化`×