Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

Security Intel Hub 393— Search: 反序列化×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Clear
Examples: RCE · SSRF · GHSA · log4j
Filter
TCL 10.0 Insufficient Validation of Serialized Session Data Leading to Memory Safety Issues (CVE-2026-34877)
mbed-tls.readthedocs.io · 2026-04-03

Based on the provided information, here is the vulnerability intelligence summary extracted and summarized in concise English Markdown format: **1. Vulnerability Overview** * **Title:** Risk of insuff…

Read more
Premium intel
CVSS 3.7
Roundcube Redis/RedisCache Session Handler Unsafe Deserialization Arbitrary File Write Fix
github.com · 2026-04-03

### Vulnerability Summary **Vulnerability Overview** A security vulnerability related to unsafe deserialization has been fixed in the Redis/RedisCache session handler of Roundcube email client. The fl…

Read more
Premium intel
CVSS 7.2
Oohu2 Insecure Deserialization RCE Vulnerability and POC
github.com · 2026-04-02

# Oohu2 Remote Code Execution Vulnerability (CVE-2023-XXXX) ## Vulnerability Overview * **Vulnerability Name**: Remote Code Execution via Insecure Deserialization in Oohu2 * **Vulnerability Type**: Re…

Read more
www.wordfence.com · 2026-05-03

# Vulnerability Summary ## Overview **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) **Vulnerability Type**: Remote Code Execution (RCE) **Description**: Th…

Read more
CVSS 4.5
NASA cFS Ground System Deserialization RCE via Pickle
vuldb.com · 2026-04-04

# NASA cFS 7.0.0 Code Execution Vulnerability Summary ### Vulnerability Overview * **Vulnerability Type**: Deserialization Vulnerability / Arbitrary Code Execution * **Affected Component**: NASA cFS G…

Read more
Premium intel
CVSS 8.8
Apache ActiveMQ CVE-2023-46604 RCE via OpenWire Deserialization
www.wordfence.com · 2026-05-23

# Vulnerability Summary ## Vulnerability Overview * **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) * **Vulnerability Type**: Remote Code Execution (RCE) *…

Read more
CVSS 7.2
Easy Digital Downloads <=3.3.3 Authenticated PHAR Deserialization (CVE-2022-2439)
www.wordfence.com · 2024-09-25

1. **Plugin Name**: Easy Digital Downloads - Simple eCommerce for Selling Digital Files <= 3.3.3 - Authenticated (Admin+) PHAR Deserialization 2. **Version**: <= 3.3.3 3. **Severity**: CVSS 7.2 (High)…

Read more
Modular Max: Fix RCE risk by removing default Pickle serialization in Zmq Sockets
github.com · 2025-11-19

### Key Information Summary #### Vulnerability Description This commit `ee9c4ab` primarily addresses serialization issues in Zmq Sockets, covering the following aspects: 1. **Removal of Default Pickle…

Read more
jsonpickle documentation
jsonpickle.github.io · 2026-05-22

### jsonpickle Vulnerability Summary #### Vulnerability Overview The jsonpickle module contains security risks when processing data. This module allows users to serialize arbitrary Python objects into…

Read more
GPT-SoVITS Multiple Deserialization RCE Vulnerabilities (CVE-2025-49837 to 49841)
securitylab.github.com · 2025-07-17

### Critical Vulnerability Information #### Vulnerability IDs - GHSL-2025-049 - GHSL-2025-053 #### Vulnerability Type - Remote Code Execution (RCE) #### Affected Component - GPT-SoVITS #### Related CV…

Read more
GitHub - jsonpickle/jsonpickle: Python library for serializing any arbitrary object graph into JSON. It can take almost
github.com · 2026-05-22

### jsonpickle Vulnerability Summary #### Overview jsonpickle is a library used to serialize Python objects into JSON format. However, this library contains a critical security vulnerability that allo…

Read more
From SQLi to RCE - Exploiting LangGraph’s Checkpointer - Check Point Research
research.checkpoint.com · 2026-06-11

### Vulnerability Overview LangGraph is an open-source framework for building multi-agent AI systems with built-in persistence. The LangGraph persistence layer (Checkpointer) contains two critical vul…

Read more
CVSS 7.1
LangChain LangSmith SDK Deserialization Vulnerability CVE-2024-45134 Analysis
github.com · 2026-05-28

# Vulnerability Overview **Vulnerability Title**: Public prompt pull deserializes untrusted manifests without trust boundary warning **Vulnerability ID**: GHSA-3644-q5cj-c5c7 **Publication Date**: 3 w…

Read more
APScheduler JSONSerializer Deserialization RCE (CVE-2026-31072)
gist.github.com · 2026-05-22

# APScheduler JSONSerializer Deserialization Remote Code Execution Vulnerability (CVE-2026-31072) ## Vulnerability Overview APScheduler's `JSONSerializer` (and `CBORSerializer`), although documented a…

Read more
CVSS 7.3
Boost Serialization Unsafe Deserialization Vulnerability and PoC
gist.github.com · 2026-06-13

### Vulnerability Overview In Boost Serialization versions v1.89.0 and earlier, there is an insecure deserialization issue. Under specific conditions, unvalidated input can lead to type confusion and …

Read more
systemd CVE-2018-15686: Serialization/Deserialization Vulnerability Fix Analysis
github.com · 2025-11-11

## Vulnerability Key Information - **CVE ID**: CVE-2018-15686 - **Vulnerability Description**: - This Pull Request (PR) introduced an alert indicating a comparison result is always the same, affecting…

Read more
MixPHP 2.x Deserialization RCE and SQL Injection (CVE-2026-37552, CVE-2026-42471 through 42475) · GitHub
gist.github.com · 2026-05-02

# MixPHP Framework Deserialization RCE and SQL Injection Vulnerability Summary ## Vulnerability Overview The MixPHP framework contains multiple critical security vulnerabilities, including Remote Code…

Read more
Premium intel
CVSS 7.2
Fix: Remote Code Execution via Jinacore Deserialization in OkAuth
github.com · 2026-04-02

### Vulnerability Summary **Vulnerability Overview** * **Vulnerability Type**: Remote Code Execution (RCE) * **Root Cause**: Deserialization vulnerability in the `Jinacore` component within `OkAuth`. …

Read more
CVSS 3.1
Roundcube Fix Unsafe Deserialization Arbitrary File Write and INP Injection
github.com · 2026-04-03

### Vulnerability Overview This update addresses two critical security vulnerabilities: 1. **INP Injection and CRLF Bypass**: A vulnerability exists in the mail search functionality, allowing INP inje…

Read more
CVSS 6.4
Apache ActiveMQ CVE-2023-46604 Remote Code Execution Vulnerability Analysis and Mitigation
www.wordfence.com · 2026-05-22

# Vulnerability Summary ## Vulnerability Overview * **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) * **Vulnerability Type**: Remote Code Execution (RCE) *…

Read more

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.