Security Intel Hub 322— Search: 反序列化×

TCL 10.0 Insufficient Validation of Serialized Session Data Leading to Memory Safety Issues (CVE-2026-34877)

**1. Vulnerability Overview:** * **Title:** Risk of insufficient validation of serialized session or context data leading to potential memory safety issues (CVE-2026-34877) * **Description:** This is …

Roundcube Redis/RedisCache Session Handler Unsafe Deserialization Arbitrary File Write Fix

### Vulnerability Summary **Vulnerability Overview** A security vulnerability related to unsafe deserialization has been fixed in the Redis/RedisCache session handler of Roundcube email client. The fl…

# Vulnerability Summary ## Overview **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) **Vulnerability Type**: Remote Code Execution (RCE) **Description**: Th…

NASA cFS Ground System Deserialization RCE via Pickle

# NASA cFS 7.0.0 Code Execution Vulnerability Summary ### Vulnerability Overview * **Vulnerability Type**: Deserialization Vulnerability / Arbitrary Code Execution * **Affected Component**: NASA cFS G…

Modular Max: Fix RCE risk by removing default Pickle serialization in Zmq Sockets

### Key Information Summary #### Vulnerability Description This commit `ee9c4ab` primarily addresses serialization issues in Zmq Sockets, covering the following aspects: 1. **Removal of Default Pickle…

GPT-SoVITS Multiple Deserialization RCE Vulnerabilities (CVE-2025-49837 to 49841)

### Critical Vulnerability Information #### Vulnerability IDs - GHSL-2025-049 - GHSL-2025-053 #### Vulnerability Type - Remote Code Execution (RCE) #### Affected Component - GPT-SoVITS #### Related CV…

systemd CVE-2018-15686: Serialization/Deserialization Vulnerability Fix Analysis

## Vulnerability Key Information - **CVE ID**: CVE-2018-15686 - **Vulnerability Description**: - This Pull Request (PR) introduced an alert indicating a comparison result is always the same, affecting…

MixPHP 2.x Deserialization RCE and SQL Injection (CVE-2026-37552, CVE-2026-42471 through 42475) · GitHub

# MixPHP Framework Deserialization RCE and SQL Injection Vulnerability Summary ## Vulnerability Overview The MixPHP framework contains multiple critical security vulnerabilities, including Remote Code…

Roundcube Fix Unsafe Deserialization Arbitrary File Write and INP Injection

### Vulnerability Overview This update addresses two critical security vulnerabilities: 1. **INP Injection and CRLF Bypass**: A vulnerability exists in the mail search functionality, allowing INP inje…

Roundcube: Fix Arbitrary File Write via Unsafe Deserialization in redis/newcache Session Handler

### Vulnerability Overview This screenshot presents a security fix commit (Commit 44e4d99) in the Roundcube email client. It addresses an **arbitrary file write vulnerability** caused by **unsafe dese…

CVE-502: RCE via Unsafe Pickle Deserialization in Async Inference Pipeline

# Vulnerability Summary ## Overview - **Vulnerability ID**: CVE-502 (Deserialization of Untrusted Data) - **Description**: In the asynchronous inference pipeline, there exist unsafe calls to `pickle.l…

ZI-SA-2026-002: Arbitrary Code Execution via Unsafe Deserialization in LabOne Q | Zurich Instruments

# Summary of Deserialization Vulnerability in Zurich Instruments LabOne Q ## Vulnerability Overview * **Vulnerability ID**: ZI-SA-2026-002 * **Vulnerability Type**: Unsafe Deserialization * **CVSS Sco…

Ray CVE-2024-2056 RCE via Parquet Cloudpickle Deserialization

### Vulnerability Overview A critical security vulnerability (CVE-2024-2056) has been identified in the Ray project, allowing attackers to execute arbitrary code through crafted Parquet files. This vu…

RCE in langgraph-checkpoint JsonPlusSerializer via Unsafe Deserialization

## Vulnerability Overview ### Vulnerability Name RCE in "json" mode of JsonPlusSerializer ### Affected Versions langgraph-checkpoint 3.0 ### Vulnerability Description Prior to version 3.0, JsonPlusSer…

RCE via Unsafe Deserialization in jsonpickle.loads

## Critical Vulnerability Information ### Vulnerability Description - **Type**: Unsafe Deserialization (`jsonpickle.loads`) - **Impact**: Remote Code Execution (RCE) - **Cause**: The `jsonpickle.loads…

CVE-2022-2265 Replicant Insecure Deserialization RCE

# Replicant: When Deserialization Starts Writing Your Scripts ## Vulnerability Overview **Replicant** is an npm package for advanced JavaScript serialization and deserialization. This vulnerability (C…

Apache ActiveMQ CVE-2023-46604 RCE Vulnerability Analysis and Mitigation

# Vulnerability Summary ## Overview * **Vulnerability Name**: Apache ActiveMQ Remote Code Execution Vulnerability (CVE-2023-46604) * **Vulnerability Type**: Remote Code Execution (RCE) * **Cause**: Th…