CVE-2026-104846

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Promise control node can pass a plugin-produced callable-bearing thenable to a native Promise resolver. ECMAScript thenab...

CVE-2026-104845 Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON trusts a deserialized source value as an ArrayBuffer and does not bound the serialized element count. An attacker can...

CVE-2026-104845 Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON trusts a deserialized source value as an ArrayBuffer and does not bound the serialized element count. An attacker can...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Предупреждение о спойлерах. Это полное прохождение, включая флаги. Если вы хотите решить машину самостоятельно, закройте это сейчас и вернитесь, когда застрянете. Информация о машине Поле| Подробности ---|--- Название| Reactor ОС| Ubuntu 24.04 LTS Noble Сложность| Medium CVE...

CVE-2026-68771_exploit

CVE-2026-68771 — Неаутентифицированное удалённое выполнение кода через десериализацию pickle в ComfyUI Неаутентифицированное удалённое выполнение кода в ComfyUI через узел LoadTrainingDataset. LoadTrainingDataset.execute загружает шарды данных из выходного каталога сервера с помощью torch.loadf и...

CVE-2025-64512

CVE-2025-64512 – pdfminer.six PoC десериализации Обзор Этот PoC демонстрирует уязвимость в pdfminer.six CVE-2025-64512, которая может привести к произвольному выполнению команд при обработке вредоносного PDF. Эксплойт использует специально созданный PDF, который ссылается на вредоносный pickle...

CVE-2025-15276-poc

CVE-2025-15276: Небезопасная десериализация PickledData в FontForge SFD RCE Отказ от ответственности Этот Proof of Concept PoC предназначен только для образовательных целей и аудита безопасности. Автор не несет ответственности за неправомерное использование этой информации. Несанкционированный...

CVE-2026-63077

Обзор • Визуальная схема • Требования • Использование • Ограничения • Защита !CAUTION Этот PoC выполняет команду операционной системы и может изменять каталог приложения TeamCity. Используйте его только в изолированной лабораторной среде или против систем, на которые у вас есть явное письменное...

FlaskCache_CVE-2021-33026_POC

Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Check redis server up and running redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Start listening netcat at port 10001 : nc -nvlp 10001 Setting environments for Flask Chache python -m venv venvflaskcac...

DEBIAN-CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877 Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

EUVD-2026-91361

Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server or pre-TLS MITM can answer a client's loadSchema subschema search with a schema object that contains a serialized Java class, allowing some potential RCE. This issue affects Apache...

CVE-2026-103877

The Apache Directory LDAP API versions 2.1.0 through 2.1.8 are vulnerable to a Deserialization of Untrusted Data flaw. A rogue or compromised LDAP server, or an attacker performing a pre-TLS man-in-the-middle (MitM) attack, can intercept a client's loadSchema() subschema search and return a craft...

session_reaper_lab

CVE-2025-54236 - Laboratoire SessionReaper Environnement Docker pour démonstration pratique de CVE-2025-54236 SessionReaper : désérialisation d'objets PHP menant à une exécution de code à distance RCE sur Magento Open Source 2.4.7. Utilisation exclusive en environnement contrôlé. N'exécutez pas...

CVE-2017-12149

CVE-2017-12149 CVE-2017-12149 JBOSS AS 6.X десериализация версия с обратной оболочкой GUI интерфейс, переписанный из режима командной строки автора подробности:http://www.cnblogs.com/sevck/p/7874438.html...