Deserialization

Everything CloudSec Press has reported about Deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

10 Oct
Vulnerabilities

Could a CVSS 9.8 Flaw in ThemeREX Dwell 1.16.0 Let Attackers Inject Objects?

A critical deserialization flaw in ThemeREX Dwell versions through 1.16.0 allows attackers to inject objects via untrusted data.

09 Oct
Vulnerabilities

IBM Security Verify Access and related identity products contain a critical flaw allowing remote attackers to run arbitrary code without credentials.