#deserialization

[ follow ]
#remote-code-execution #odata #net #api-modernization #solarwinds #web-help-desk #authentication-bypass
Software development
fromInfoQ
13 hours ago

Microsoft Ships OData .NET (ODL) 9.0.0 Preview 3: Safety, Modern APIs, and Spec Compliance

OData .NET 9.0.0 Preview 3 modernizes client/core libraries with safer defaults, API cleanup, spec-aligned deserialization, and runtime improvements for .NET 8/9/10 compatibility.
Information security
fromThe Hacker News
2 days ago

SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass

SolarWinds Web Help Desk has multiple critical vulnerabilities, including deserialization flaws enabling unauthenticated remote code execution; updates fixed issues in WHD 2026.1.
Information security
fromSecurityWeek
4 months ago

Fortra Patches Critical GoAnywhere MFT Vulnerability

A deserialization vulnerability in GoAnywhere MFT (CVE-2025-10035) can enable remote code execution; apply provided patches and restrict Admin Console exposure.
London startup
fromDeveloper Tech News
9 months ago

Security flaws hit PyTorch Lightning deep learning framework

PyTorch Lightning has critical security flaws due to deserialisation vulnerabilities, potentially allowing arbitrary code execution from untrusted model files.
[ Load more ]