cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

CVE-2025-53770

CVE-2025-53770 Detection Project A comprehensive vulnerability detection toolkit for identifying systems vulnerable to CVE-2025-53770 CWE-502: Deserialization of Untrusted Data. 🔍 Overview This project provides enterprise-ready detection scripts to identify and assess systems potentially vulnerab...

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

cotonti-commentswidget-poc

Cotonti CommentsWidget PHP 객체 주입 PoC Cotonti의 CommentsWidget 구현에서 확인된 PHP 객체 주입 문제에 대한 안전한 로컬 개념 증명입니다. 취약점 프로젝트: Cotonti 영향받는 구성 요소: plugins/comments/inc/CommentsWidget.php CWE: CWE-502 — 신뢰할 수 없는 데이터의 역직렬화 CVE/후보: CAN-2026-2035973 / CVE-2026-71294 연구자: Harsh Raj Singhania 취약한 코드 경로는 ci GET 파라미터...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB 역직렬화 PoC pdfminer.six의 역직렬화 취약점에 대한 개념 증명PoC으로, 악성 PDF를 파싱할 때 임의 코드 실행으로 이어집니다. 목적 / 법적 고지 이 저장소는 교육 및 승인된 보안 연구용으로만 제공됩니다. 공개적으로 공개되었고 패치된 CVE 를 재현합니다. 소유하지 않았거나 서면 승인 없이 테스트할 권한이 없는 시스템에는 사용하지 마십시오. 작성자는 어떠한 오용에 대해서도 책임지지 않습니다. 의도된 환경: Hack The Box / VulnHub...

CVE-2026-50522

🛡️ CVE-2026-50522 — Microsoft SharePoint RCE 조사 활발히 악용 중인 치명적인 SharePoint 역직렬화 취약점 작성자: Pratik Chhetri 보고일: 2026-07-27 📌 핵심 요약 항목| 조사 결과 ---|--- 취약점| CVE-2026-50522 제품| Microsoft SharePoint Server 온프레미스 영향받는 버전| SharePoint Server 2016, SharePoint Server 2019, SharePoint Server Subscription...

CVE-2026-68771_exploit

CVE-2026-68771 — ComfyUI 인증되지 않은 Pickle 역직렬화 RCE ComfyUI에서 LoadTrainingDataset 노드를 통한 인증되지 않은 원격 코드 실행. LoadTrainingDataset.execute는 torch.loadf를 사용하여 서버의 출력 디렉터리에서 데이터셋 샤드를 로드하며 weightsonly=True가 없습니다. PyTorch /tmp/pwned' 명령은 서버 에서 실행됩니다. 출력이 반환되지 않으므로 결과를 확인하려면 --shell을 사용하여 리버스 셸을 얻거나읽기 가능한 경로...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-사후-사고-보고서 이 사후 사고 보고서는 Cisco Secure Firewall Management CenterFMC의 치명적인 제로데이 무인증 원격 코드 실행RCE 취약점인 CVE-2026-20131의 악용을 분석합니다. 이 문서는 Java 객체 역직렬화CWE-502를 통한 초기 침입 경로, Interlock 랜섬웨어 그룹이 사용한 위협 행위자 전술, 네트워크 열거 워크플로우, 포렌식 타임라인을 다룹니다. 또한 근본 원인 분석 결과, 네트워크 세분화에 관한 교훈, 즉각적인 패치 적용, 계정 감사, ...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start 🐛 Vulnerability Deep Dive 🔬 Technical Root Cause Analysis ⚔️ Attack Chain Methodology 💀 Payload Arsenal 55+ 🎮 Operator's Strategy Guide...

langgrinch-cve-2025-68664-analysis

LangGrinch 취약점 분석: CVE-2025-68664 개요 이 저장소는 LangChain Core에 영향을 미치는 직렬화 주입 취약점인 LangGrinch라고도 알려진 CVE-2025-68664를 분석한 기술 보고서를 포함합니다. 이 보고서는 취약점 배경, 근본 원인, 악용 흐름, 위협 모델, 완화 전략, 그리고 LLM 기반 애플리케이션에 대한 실제 보안 영향을 설명합니다. 다루는 주제 LangChain 직렬화 및 역직렬화 안전하지 않은 역직렬화 / CWE-502 LLM 애플리케이션 보안 전달 경로로서의 프롬프트 인젝션...

Security Bulletin: Multiple security vulnerabilities have been identified in Python packages shipped with IBM Guardium Cryptography Manager (GCM)

Summary Multiple security vulnerabilities identified in Python packages shipped with IBM Guardium Cryptography Manager GCM have been addressed Vulnerability Details CVEID:CVE-2026-48775 DESCRIPTION: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB...

Security Bulletin: jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator 3.4

Summary jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator Vulnerability Details CVEID:CVE-2019-10172 DESCRIPTION: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehau...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution. id: CVE-2020-10189 info: name: ManageEngine Desktop Central Java Deserialization author: king-alexander severity: critical description: | Zoho ManageEngine...

Deserialization of Untrusted Data

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the machine learning component when processing trained model artifacts. An attacker can execu...

Security Bulletin: NVIDIA Megatron Bridge - September 2026

NVIDIA has released a software update for NVIDIA® Megatron Bridge. To protect your system, clone or update this software to version 0.5.1 or later from the NVIDIA/Megatron-Bridge GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software update for NVIDIA® Megatron Bridge...

EUVD-2026-67870

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

Deserialization of Untrusted Data

Overview org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the JobParameterDeserializer. An attacker can execute arbitrary code by...

Deserialization of Untrusted Data

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization. An attacker can execute arbitrary code by submitting a crafted GraphQL request containing...

Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection

Summary IBM Terracotta uses Logback for logging purposes within the product. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit...