CVE-2021-3129

CVE-2021-3129 生成自定义命令的phar包： php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a 进入php命令行环境 $fp = fopen'php://output', 'w'; streamfilterappend$fp, 'convert.quoted-printable-encode'; $size = ""; fwrite$fp,...

iOS26.6-CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2023-37941

Explotación de Pickle RCE en la caché predeterminada de Superset Información Autor Dinis Cruz Proyecto Superset Descripción Apache Superset presenta diferentes opciones para el almacenamiento en caché, todas basadas en Flask-Caching. Se proporciona una caché incorporada que serializa valores para...

CVE-2025-24016

CVE-2025-24016 Una vulnerabilidad de deserialización insegura en los servidores Wazuh permite la ejecución remota de código mediante la inyección de diccionarios no saneados en las solicitudes/respuestas DAPI. Este problema surge de la forma en que los parámetros de DistributedAPI se serializan...

Roundcube-CVE-2025-49113

Roundcube RCE Exploit CVE-2025-49113 A fully functional proof-of-concept exploit for CVE-2025-49113 🧠 Summary CVE-2025-49113 is an The vulnerability is the result of a logic flaw in the application's session parser, which allows insecure deserialization of PHP objects. Authenticated users can...

CVE-2025-55182-Exploit

CVE-2025-55182 — Next.js Flight Deserialization RCE Remote Code Execution exploit for Next.js Server Actions Flight deserialization vulnerability 📌 Overview This repository contains a working exploit for CVE-2025-55182 , a deserialization vulnerability in the Next.js Flight protocol Server Action...

GadgetToJScript

Description A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA scripts. The current gadget triggers a call to Activator.CreateInstance when deserialized using BinaryFormatter from jscript/vbscript/vba...

vbulletin-exploits

vbulletin-exploits Exploits targeting vBulletin. CVE-2023-25135: Pre-authentication RCE See: https://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable ./vbulletin-rce-cve-2023-25135.py --help Usage: vbulletin-rce-cve-2023-25135.py -h -p PROXY url command Exploit for CVE-2023-25135:...

CVE-2025-55182

CVE-2025-55182 - React2Shell Ejecución remota de código sin autenticación en React Server Components. Resumen del CVE Existe una vulnerabilidad de ejecución remota de código sin autenticación en las versiones 19.0.0, 19.1.0, 19.1.1 y 19.2.0 de React Server Components, que incluye los paquetes...

CVE-2019-2729-Exploit

CVE-2019-2729-Exploit uso: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : Muestra el mensaje de ayuda y sale -u TARGET : URL de destino -c COMMAND : Comando a ejecutar Ejemplo de uso python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami Crédito por el...

CVE-2026-103877

A flaw was found in Apache Directory LDAP API. This vulnerability allows a rogue or compromised LDAP server, or a network attacker performing a man-in-the-middle MitM attack, to execute arbitrary code on the client. During a schema search request, an attacker can return a crafted schema object...

CVE-2026-49085

CVE-2026-49085 CVE-2026-49085 Exploit de inyección de objetos PHP en WP Insightly...

CVE-2021-30128-EXP

CVE-2021-30128 Apache OFBiz Deserialization Vulnerability EXP Reference: https://mp.weixin.qq.com/s/Dr-jwiRr4NByjErjiXe1w...

CVE-2026-63077

CVE-2026-63077 — JetBrains TeamCity Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Actively Exploited in the Wild This repository contains a fully functional proof-of-concept PoC exploit for CVE-2026-63077 , a critical deserialization vulnerability in...

CVE-2025-55182-POC

CVE-2025-55182 POC & Detección Colección de herramientas de explotación y detección de la vulnerabilidad de deserialización insegura de React Server Components RSC Información de la vulnerabilidad CVE-ID : CVE-2025-55182 Versiones afectadas : React 19.x, Next.js 15.x/16.x usando App Router Vector...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

CVE-2026-104845

A flaw was found in seroval. A remote attacker can cause a Denial of Service DoS by providing crafted JSON input containing an excessively large array length during data deserialization. Due to missing bounds validation when reconstructing array structures, the application synchronously allocates...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...

CVE-2026-104846

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...