5595 matches found
SAP jConnect 代码问题漏洞
SAP jConnect is a database connectivity software from SAP, a German company. A code issue vulnerability exists in SAP jConnect that stems from a deserialization vulnerability that could lead to remote code execution...
PT-2025-49911
CVE-2025-67535 Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Maps wp-google-map-plugin allows Object Injection.This issue affects W… https://t.co/oSmbMyC08D...
NVIDIA NVTabular 代码问题漏洞
NVIDIA NVTabular is a component of a deep learning recommender system framework from NVIDIA, USA. A deserialization vulnerability exists in NVIDIA NVTabular, which arises from unsafe deserialization of serialized data received from users by the Workflow component and can be exploited by an attack...
PT-2025-49778
CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...
📄 React / Next.js Unauthenticated Remote Code Execution
A critical unauthenticated remote code execution vulnerability exists in React Server Components RSC Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with proto, constructor, o...
PT-2025-50283
Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description A Deserialization of Untrusted Data issue exists that could lead to arbitrary code execution with the privileges of the current user. A high-privileged attacker could...
Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
Impact Versions of CSLA .NET prior to version 6 allow the use of WcfProxy. WcfProxy uses the NetDataContractSerializer NDCS which has known vulnerabilities that can allow remote execution of code during deserialization. NDCS itself is considered obsolete, and you should avoid using WcfProxy or...
Security Bulletin: IBM webMethods Integration (on prem) is affected by arbitrary code execution
Summary IBM webMethods Integration on prem uses java objects for displaying graph data CVE-2025-36072 Vulnerability Details CVEID:CVE-2025-36072 DESCRIPTION: IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Next.js RCE Exploit Tool 中文文档./README.zh-CN...
Exploit for Deserialization of Untrusted Data in Facebook React
🧨 React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React2Shell PoC A proof of concept exploit f...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Security Tool CVE-2025-55182 & CVE-2025-66478...
Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax
CVE-2019-18935 Nuclei Template - Bounty Submission This repos...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Proof-of-Concept This repository contains a Pr...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-202...
Exploit for Deserialization of Untrusted Data in Facebook React
React2S...
VulnCheck KEV: CVE-2024-44902
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...
Exploit for Deserialization of Untrusted Data in Facebook React
C...