CVE-2021-30128-EXP

CVE-2021-30128 Apache OFBiz EXP de vulnerabilidad de deserialización Referencia https://mp.weixin.qq.com/s/Dr-jwiRr4NByjErjiXe1w...

CVE-2026-63077

CVE-2026-63077 — JetBrains TeamCity Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Actively Exploited in the Wild This repository contains a fully functional proof-of-concept PoC exploit for CVE-2026-63077 , a critical deserialization vulnerability in...

CVE-2025-55182-POC

CVE-2025-55182 POC & Detección Colección de herramientas de explotación y detección de la vulnerabilidad de deserialización insegura de React Server Components RSC Información de la vulnerabilidad CVE-ID : CVE-2025-55182 Versiones afectadas : React 19.x, Next.js 15.x/16.x usando App Router Vector...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

CVE-2026-104845

A flaw was found in seroval. A remote attacker can cause a Denial of Service DoS by providing crafted JSON input containing an excessively large array length during data deserialization. Due to missing bounds validation when reconstructing array structures, the application synchronously allocates...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC para la vulnerabilidad de deserialización en el protocolo Flight de React Server Components. ¿Qué es? Next.js 14+ y React 19 usan un protocolo propietario "Flight" para comunicarse entre cliente y servidor. El problema: el servidor carga cualquier módulo sin...

CVE-2026-104846

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104845 Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON trusts a deserialized source value as an ArrayBuffer and does not bound the serialized element count. An attacker can...

CVE-2026-104845 Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON trusts a deserialized source value as an ArrayBuffer and does not bound the serialized element count. An attacker can...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Advertencia de spoiler. Esta es una guía completa que incluye las flags. Si quieres resolver la máquina por tu cuenta, cierra esto ahora y vuelve cuando estés atascado. Información de la máquina Campo| Detalles ---|--- Nombre| Reactor SO| Ubuntu 24.04 LTS Noble Dificultad|...

CVE-2026-68771_exploit

CVE-2026-68771 — RCE no autenticado por deserialización de pickle en ComfyUI Ejecución remota de código no autenticada en ComfyUI a través del nodo LoadTrainingDataset. LoadTrainingDataset.execute carga los shards del dataset desde el directorio de salida del servidor con torch.loadf y...

CVE-2025-64512

CVE-2025-64512 – PoC de Deserialización de pdfminer.six Descripción General Esta prueba de concepto demuestra una vulnerabilidad en pdfminer.six CVE-2025-64512 que puede conducir a la ejecución arbitraria de comandos cuando se procesa un PDF malicioso. El exploit utiliza un PDF manipulado que hac...

CVE-2025-15276-poc

CVE-2025-15276: Deserialización Insegura de PickledData en FontForge SFD RCE Descargo de responsabilidad Esta Prueba de Concepto PoC es únicamente para fines educativos y auditoría de seguridad. El autor no se responsabiliza por el mal uso de esta información. El acceso no autorizado a sistemas...

CVE-2026-63077

Resumen • Flujo visual • Requisitos • Uso • Limitaciones • Mitigación !CAUTION Este PoC ejecuta un comando del sistema operativo y puede modificar el directorio de la aplicación TeamCity. Úselo únicamente en un laboratorio aislado o contra sistemas para los que tenga autorización explícita por...

FlaskCache_CVE-2021-33026_POC

Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Verificar que el servidor redis esté funcionando redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Iniciar escucha con netcat en el puerto 10001 : nc -nvlp 10001 Configuración de entornos para Flask Chac...

CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877 Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...