Security Intel Hub 553— Search: `反序列化`×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

CVE-2020-9484: Apache Tomcat RCE via Session Persistence Deserialization

lists.apache.org · 2025-11-11

### Critical Vulnerability Information #### Vulnerability ID CVE-2020-9484 #### Vulnerability Type Apache Tomcat Remote Code Execution via session persistence #### Release Date May 20, 2020 #### Vulne…

CVE-2019-14892: jackson-databind Deserialization Vulnerability Fix

bugzilla.redhat.com · 2025-11-11

Based on the web page screenshot, the following are the key details regarding this vulnerability: - **Vulnerability ID and CVE Number**: - Bug ID: 1758171 - CVE Number: CVE-2019-14892 - **Vulnerabilit…

Fastjson 1.2.80 Deserialization Vulnerability Analysis with PoC

github.com · 2025-11-11

### Critical Vulnerability Information #### Vulnerability Type Fastjson Deserialization Vulnerability #### Affected Versions - Fastjson Version: 1.2.80 #### Vulnerability Description A Fastjson deseri…

PHP WDDX Extension Null Dereference Vulnerability Fix in Deserialization

github.com · 2025-11-11

- **Commit Information:** - **Commit ID:** a14fdb9 - **Author:** smalyshev - **Date:** Aug 11, 2016 - **Description:** Fix for bug #72790 and bug #72799 - **Bugs Fixed:** - Bug #72790: wddx_deserializ…

Hutool XmlUtil Deserialization RCE Vulnerability Analysis

github.com · 2025-11-11

From the screenshot, the following key information about the vulnerability can be obtained: ### Vulnerability Description - **Vulnerability Type**: Deserialization vulnerability - **Affected Class**: …

Wikimedia API format=php PHP Deserialization Vulnerability (CVE-2014-9277)

phabricator.wikimedia.org · 2025-11-12

### Vulnerability Key Information - **Vulnerability Name**: - `` mal ickkai allows injection in API format=php - **Status**: - Closed, Resolved - **Type**: - Security - **Impact Scope**: - API clients…

PrestaShop Phar Deserialization RCE (CVE-2018-19126/19125) with Exploit

www.exploit-db.com · 2025-11-12

### Vulnerability Information - **EDB-ID**: 45964 - **CVE**: - CVE-2018-19126 - CVE-2018-19125 - **Author**: FARISKHI VIDYAN - **Type**: WEBAPPS - **Platform**: PHP - **Date**: 2018-12-11 - **Vulnerab…

CVSS 7.2

Simple Job Board 2.12.4 Patch Fixes Deserialization Vulnerability

plugins.trac.wordpress.org · 2025-11-12

### Key Information Summary #### Vulnerability Type - **Deserialization Vulnerability Fix** - The plugin removed usage of the `maybe_unserialize` function across multiple files, indicating that previo…

Apache NiFi Security Advisory: CVE-2020-27218 (HTTP Request Smuggling) and CVE-2021-20190 (Deserialization)

lists.apache.org · 2025-11-13

## Critical Vulnerability Information ### CVE-2020-27218 - **Affected Versions**: Apache NiFi 1.2.0 - 1.12.1 - **Description**: The Jetty server dependency contains an HTTP Request Smuggling vulnerabi…

CVE-2020-1714 Keycloak Java Deserialization RCE Vulnerability Advisory

bugzilla.redhat.com · 2025-11-13

### Vulnerability Key Information - **CVE ID**: CVE-2020-1714 - **Vulnerability Type**: Lack of checks in ObjectInputStream leading to Remote Code Execution - **Reported Time**: 2019-05-03 10:27 UTC -…

CVE-2023-46801: Apache Linkis DataSource Deserialization RCE

lists.apache.org · 2025-11-14

**CVE-2023-46801: Apache Linkis DataSource: Remote code execution vulnerability in Apache Linkis 1.4.0** **Severity:** Moderate **Affected Versions:** - Apache Linkis DataSource 1.4.0 before 1.6.0 **D…

Apache OFBiz CVE-2019-0189 Deserialization Vulnerability Fix Analysis

lists.apache.org · 2025-11-14

## Critical Vulnerability Information - **CVE ID**: CVE-2019-0189 - **Fix Content**: Improved the ObjectInputStream class ### Report and Fix Details - **Reporter**: Dikpal Kanungo - **Fixer**: Jacques…

Premium intel

CVSS 7.5

Splunk Enterprise Windows Path Injection Leading to Unsafe Deserialization (CVE-2024-23678)

advisory.splunk.com · 2025-11-14

### Critical Vulnerability Information - **Advisory ID**: SVD-2024-0108 - **CVE ID**: CVE-2024-23678 - **Published**: 2024-01-22 - **Last Update**: 2024-01-30 - **CVSSv3.1 Score**: 7.5, High - **CWE**…

Premium intel

CVSS 8.6

Rockwell ISaGRAF Workbench Deserialization & Path Traversal Vulnerabilities (CVE-2022-2463/2464/2465)

www.cisa.gov · 2025-11-14

### Critical Vulnerability Information #### 1. Executive Summary - **CVSS v3**: 8.6 - **Concern**: Low attack complexity - **Vendor**: Rockwell Automation - **Product**: ISaGRAF Workbench - **Vulnerab…

GLPI 0.83.9 Unserialization Vulnerability (CWE-502) Analysis

seclists.org · 2025-11-14

### Critical Vulnerability Information - **Advisory Title**: unserialize vulnerability in GLPI - **Product**: GLPI 0.83.9 - **Discovered by**: Xavier Mehrenberger @Cassidian CyberSecurity - **Vulnerab…

Apache Batik/FOP/XMLGraphics Commons SSRF/XXE/Deserialization Vulnerability Advisory

xmlgraphics.apache.org · 2025-11-14

- **Apache™ Batik Project Security:** - CVE-2022-44729 / SSRF vulnerability / Fixed in Batik 1.17 - CVE-2022-44730 / SSRF vulnerability / Fixed in Batik 1.17 - CVE-2022-42890 / SSRF vulnerability / Fi…

CVSS 6.5

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 553— Search: `反序列化`×

CVE-2020-9484: Apache Tomcat RCE via Session Persistence Deserialization

CVE-2019-14892: jackson-databind Deserialization Vulnerability Fix

Fastjson 1.2.80 Deserialization Vulnerability Analysis with PoC

PHP WDDX Extension Null Dereference Vulnerability Fix in Deserialization

Hutool XmlUtil Deserialization RCE Vulnerability Analysis

Wikimedia API format=php PHP Deserialization Vulnerability (CVE-2014-9277)

PrestaShop Phar Deserialization RCE (CVE-2018-19126/19125) with Exploit

Simple Job Board 2.12.4 Patch Fixes Deserialization Vulnerability

Apache NiFi Security Advisory: CVE-2020-27218 (HTTP Request Smuggling) and CVE-2021-20190 (Deserialization)

CVE-2020-1714 Keycloak Java Deserialization RCE Vulnerability Advisory

CVE-2023-46801: Apache Linkis DataSource Deserialization RCE

Apache OFBiz CVE-2019-0189 Deserialization Vulnerability Fix Analysis

Splunk Enterprise Windows Path Injection Leading to Unsafe Deserialization (CVE-2024-23678)

Rockwell ISaGRAF Workbench Deserialization & Path Traversal Vulnerabilities (CVE-2022-2463/2464/2465)

GLPI 0.83.9 Unserialization Vulnerability (CWE-502) Analysis

Apache Batik/FOP/XMLGraphics Commons SSRF/XXE/Deserialization Vulnerability Advisory

Node.js Security Audit: X-Forwarded Spoofing, Directory Traversal, CSRF, and Insecure Deserialization Analysis

ZMQ Pickle Deserialization RCE in Meta/NVIDIA/vLLM (CVE-2024-50050, CVE-2025-30165)

MISP 2.4.157 PHAR Deserialization RCE Vulnerability (CVE-2022-29528) Advisory

Zammad Insecure Deserialization RCE Advisory (CVE-2021-42090)

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 553— Search: 反序列化×

Security Intel Hub 553— Search: `反序列化`×