cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

CVE-2025-53770

CVE-2025-53770 Detection Project A comprehensive vulnerability detection toolkit for identifying systems vulnerable to CVE-2025-53770 CWE-502: Deserialization of Untrusted Data. 🔍 Overview This project provides enterprise-ready detection scripts to identify and assess systems potentially vulnerab...

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

cotonti-commentswidget-poc

Cotonti CommentsWidget PHP オブジェクトインジェクション PoC Cotonti の CommentsWidget 実装で確認された PHP オブジェクトインジェクション問題に対する安全なローカル概念実証です。 脆弱性 プロジェクト: Cotonti 影響を受けるコンポーネント: plugins/comments/inc/CommentsWidget.php CWE: CWE-502 — 信頼できないデータのデシリアライズ CVE/候補: CAN-2026-2035973 / CVE-2026-71294 研究者: Harsh Raj Singhania...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB 反序列化 PoC 针对 pdfminer.six 中反序列化漏洞的概念验证，该漏洞在解析特制 PDF 时会导致任意代码执行。 目的 / 法律免责声明 本仓库仅用于教育和授权的安全研究 。它复现了一个已公开披露并已修补的 CVE 。 请勿 将其用于你不拥有或未经书面许可测试的系统。作者对任何滥用行为不承担责任。 预期环境：Hack The Box / VulnHub / 本地实验室。 漏洞 CVE: CVE-2025-64512 受影响版本: 20250506 之前的 pdfminer.six 已修补版本:...

CVE-2026-50522

🛡️ CVE-2026-50522 — Microsoft SharePoint RCE 調査 活発に悪用されている重大な SharePoint デシリアライゼーション脆弱性 作成者: Pratik Chhetri レポート日: 2026-07-27 📌 エグゼクティブサマリー...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

CVE-2026-68771_exploit

CVE-2026-68771 — ComfyUI 認証不要ピクルス逆シリアライゼーション RCE ComfyUI における LoadTrainingDataset ノードを介した認証不要のリモートコード実行。 LoadTrainingDataset.execute は、サーバーの出力ディレクトリからデータセットシャードを torch.loadf で読み込み、weightsonly=True を指定しません。PyTorch 2.6（weightsonly が デフォルトで False の場合）では、細工された shard.pkl が読み込み時にそのピクルス reduce...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-Informe-Escrito-Post-Incidente Este informe post-incidente analiza la explotación de CVE-2026-20131, una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada de día cero en Cisco Secure Firewall Management Center FMC. El documento cubre el vector de intrusión...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start...

langgrinch-cve-2025-68664-analysis

LangGrinch Vulnerability Analysis: CVE-2025-68664 Overview This repository contains a technical report analyzing CVE-2025-68664, also known as LangGrinch, a serialization injection vulnerability affecting LangChain Core. The report explains the vulnerability background, root cause, exploitation...

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution. id: CVE-2020-10189 info: name: ManageEngine Desktop Central Java Deserialization author: king-alexander severity: critical description: | Zoho ManageEngine...

EUVD-2026-67870

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

Deserialization of Untrusted Data

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization. An attacker can execute arbitrary code by submitting a crafted GraphQL request containing...

Deserialization of Untrusted Data

Overview org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the JobParameterDeserializer. An attacker can execute arbitrary code by...

Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection

Summary IBM Terracotta uses Logback for logging purposes within the product. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit...

Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent

Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2026-41254, CVE-2026-47057, CVE-2026-47058, CVE-2026-47063 and CVE-2026-8400 Vulnerability Details CVEID:CVE-2026-47057...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

CVE-2026-63337 RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

PT-2026-77211

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...