sharepoint-2026-poc

SharePoint /trust WS-Federation 역직렬화: PoC 및 탐지 노트 라이브 문서GitHub Pages: https://sp-poc.wismansec.com/ 이 문서의 HTML 렌더링. 영향 대상: SharePoint Server 2016, 2019 및 Subscription Edition. 격리된 랩에서 SharePoint ServerSubscription Edition 침해 사고를 재구성한 것으로, a 공격자의 전체 역량을 이해하고, b 방어자가 무엇을 사냥해야 하는지스텔스 지속성 포함 파악하며, c ...

GadgetToJScript

Description A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA scripts. The current gadget triggers a call to Activator.CreateInstance when deserialized using BinaryFormatter from jscript/vbscript/vba...

cve-2025-59287-exploit-poc

CVE-2025-59287 Proof-of-Concept Exploit Vulnerability Overview CVE-2025-59287 is a critical Remote Code Execution RCE vulnerability in Microsoft Windows Server Update Services WSUS. The vulnerability is caused by unsafe deserialization of AuthorizationCookie data through BinaryFormatter in the...

Exploit for CVE-2026-26221

📡 Hyland OnBase Timer Service Unauthenticated RCE Mohamm...

Exploit for CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-202...

EUVD-2022-48060

Malicious code in bioql PyPI...

Sitecore CVE-2025-27218 BinaryFormatter Deserialization

This Metasploit module exploits a .NET deserialization vulnerability in Sitecore Experience Manager XM and Experience Platform XP 10.4 by injecting a malicious Base64-encoded BinaryFormatter payload into an HTTP header. This module requires Metasploit: https://metasploit.com/download Current...