Vulnerabilities
Python Pickle Deserialization Warning Signs and Mitigation
Python pickle data streams hide executable code that runs automatically upon loading, turning trusted data stores into direct execution vectors for remote attackers.
deserialization
Everything Payload Report has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Xorbits Xoscar: Critical Deserialization Bug Enables Root Code Execution via TCP Channel
Attackers can execute arbitrary code on servers running Xorbits Xoscar versions up to 0.11.2 by sending crafted data to the actor-pool TCP channel.