VYPR

Twittodon

by Tomaszdunia

CVEs (1)

  • CVE-2025-63950HigDec 18, 2025
    risk 0.49cvss 7.5epss 0.01

    An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b (2023-02-28). The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize()…