CVE-2026-19490-check

Citrix NetScaler SAML nFactor Context Authentication Bypass — Vulnerability Detection Script A safe, unauthenticated vulnerability check for CVE-2026-19490 , the pre-authentication authentication bypass in the Citrix NetScaler ADC / NetScaler Gateway SAML service-provider path CTX696939, publishe...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

VulnerableGWTApp

Aplicación web GWT vulnerable Esta es una versión de la aplicación de ejemplo StockWatcher descrita en la guía de introducción a GWT que ha sido modificada para usar la funcionalidad de «clases mejoradas» de GWT, lo que la hace vulnerable a un ataque de deserialización de Java. Solo debe utilizar...

GadgetProbe

Descripción Acabas de encontrar un bug de deserialización de Java, ejecutaste todos tus payloads de ysoserial y... no obtuviste nada. ¿Y ahora qué? ¿Cómo puedes depurar o construir una cadena de gadgets si estás completamente a ciegas? Te presentamos GadgetProbe, una herramienta que arroja luz...

CVE-2018-20062

CVE-2018-20062 ThinkPHP 5.0.23 - CVE-2018-20062 Impact Verification Affected Versions ThinkPHP 5.0.x 5.0.23 invokefunction deserialization Verification Methodology Standard impact assessment for this CVE follows a two-phase approach: 1. Existence check — confirm the invokefunction route is...

CVE-2025-55182

CVE-2025-55182 - React2Shell CVE-2025-55182 unauthenticated RCE via React Server Components Flight deserialization Standalone exploit for CVE-2025-55182 in Next.js App Router apps that enable React Server Components. Crafted RSC Flight payloads to the server-action endpoint give unauthenticated...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2019-10068-PoC

CVE-2019-10068 PoC for Kentico CMS Proof of concept exploit for CVE-2019-10068, leveraging a Deserialization RCE in Kentico CMS to upload a web shell. Legal Disclaimer: This proof-of-concept is provided for educational and authorised security research purposes only. The author is not responsible...

log4j2-rce

Log4j FilteredObjectInputStream Bypass Pre-auth RCE on any Java service that deserializes LogEvent through Log4j's FilteredObjectInputStream. No credentials needed. Reported as GitHub issue 4255 on August 24, 2026. What it does Log4j ships FilteredObjectInputStream FOIS as a safe deserialization...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-Post-Incident-Written-Report This post-incident report analyzes the exploitation of CVE-2026-20131, a critical zero-day unauthenticated Remote Code Execution RCE vulnerability in Cisco Secure Firewall Management Center FMC. The document covers the initial intrusion vector via Java...

yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

log4j-4255

log4j2 4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject A self-contained, containerised lab that reproduces Apache log4j2 issue4255 end-to-end against the official Log4j 2.26.1 artifacts on JDK 17 , with positive controls, a hardened oracle, and a validated...

CVE-2026-55083

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

CVE-2026-42779

CVE-2026-42779 — Apache MINA Deserialization Filter Bypass to RCE CVSS 3.1: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-502 Deserialization of Untrusted Data Reporter: Venkatraman Kumar, Securin Advisory: Apache Mailing List Overview Apache MINA versions 2.1.0 through 2.1.11 and 2.2...

CVE-2026-42778-POC

CVE-2026-42778 Overview Incomplete fix in Apache MINA AbstractIoBuffer.getObject method. The classname allowlist validation that restricts which classes can be deserialized is applied too late, after static initializers in classes being read may have already executed. This occurs because the...

learnjavabug

Este proyecto es solo para investigación de seguridad. Se prohíbe usar este proyecto para lanzar ataques ilegales. El usuario es responsable de las consecuencias. Este es un proyecto personal para reproducir y publicar algunas vulnerabilidades interesantes o de gran impacto. No tiene mucho...

nextjs-security-scanner

La versión japonesa está disponible en README.ja.md. nextjs-security-scanner Script Bash para detectar CVE-2025-55182 React2Shell y exposición de credenciales en proyectos Next.js. Sin dependencias. CVE-2025-55182: React2Shell CVSS: 10.0 CRÍTICO | CWE-502: Deserialización de datos no confiables |...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Deserialization Vulnerability in Microsoft Office SharePoint 🚀 Overview This lab demonstrates a deserialization vulnerability in Microsoft Office SharePoint that enables remote code execution RCE. The issue arises from improper handling of untrusted serialized data within...

CVE-2026-33439-OpenAM

CVE-2026-33439 is a pre-auth unsafe deserialization issue in OpenAM 16.0.6 affecting JATO ViewBean endpoints. Public advisories mention JATO endpoints but do not enumerate reachable routes. This research identifies /openam/ui/PWResetUserValidation as a reachable pre-auth JATO endpoint...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...