Lucene search
+L

29633 matches found

GithubExploit
GithubExploit
added 2025/12/12 6:33 p.m.256 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next...

10CVSS7.8AI score0.99802EPSS
SaveExploits389
GithubExploit
GithubExploit
added 2025/12/12 5:42 p.m.179 views

Exploit for CVE-2025-66478

React2Shell POC https://nextjs.org/blog/CVE-2025-66478 테스...

7.2AI score
SaveExploits112
GithubExploit
GithubExploit
added 2025/12/12 4:41 p.m.164 views

Exploit for Deserialization of Untrusted Data in Facebook React

No d...

10CVSS7AI score0.99802EPSS
SaveExploits389
EUVD
EUVD
added 2025/12/12 4:32 p.m.16 views

EUVD-2025-202926

Denial of Service Vulnerability in React Server Components...

7.5CVSS6.2AI score0.20263EPSS
SaveExploits3References5
OSV
OSV
added 2025/12/12 4:23 p.m.10 views

CLSA-2025-1765463952 cups: Fix of CVE-2025-58364

CVE-2025-58364: fix unsafe deserialization and validation of printer attributes causing null dereference...

6.5CVSS5.8AI score0.01067EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/12/12 1:22 p.m.173 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-...

10CVSS8.4AI score0.99802EPSS
SaveExploits403
OSV
OSV
added 2025/12/12 12:30 p.m.20 views

GHSA-Q37J-3367-FWV7 Apache HugeGraph-Server: RAFT and deserialization vulnerability

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

9.3CVSS8.6AI score0.00904EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/12/12 12:30 p.m.13 views

Apache HugeGraph-Server: RAFT and deserialization vulnerability

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

8.8CVSS8.7AI score0.00904EPSS
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
added 2025/12/12 11:31 a.m.177 views

Exploit for Deserialization of Untrusted Data in Facebook React

⚛️ React2Shell CVE-2025-55182 !Pythonhttps://img.shields...

10CVSS7.8AI score0.99802EPSS
SaveExploits389
GithubExploit
GithubExploit
added 2025/12/12 10:49 a.m.153 views

Exploit for Deserialization of Untrusted Data in Facebook React

Vulnerable React Application CVE-2025-55182 This applicatio...

10CVSS8.3AI score0.99802EPSS
SaveExploits389
NCSC
NCSC
added 2025/12/12 10:46 a.m.16 views

Vulnerabilities fixed in React Server Components

Meta has fixed vulnerabilities in React Server Components Parcel, Turbopack and Webpack Specifically for versions 19.0.2, 19.1.3 and 19.2.2. The vulnerabilities are related to insecure deserialization of HTTP request payloads, which can lead to Denial-of-Service attacks and server hangs. This...

7.5CVSS7.2AI score0.67291EPSS
SaveExploits13References4
NVD
NVD
added 2025/12/12 10:15 a.m.32 views

CVE-2025-26866

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

8.8CVSS0.00904EPSS
SaveExploits0References3
Snyk
Snyk
added 2025/12/12 9:47 a.m.6 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via insecure Hessian deserialization in the PD store. An attacker can execute arbitrary code by sending maliciously crafted data from a compromised or rogue Raft node. Details Serialization is a process...

8.8CVSS7.7AI score0.00904EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/12/12 9:30 a.m.177 views

Exploit for Deserialization of Untrusted Data in Facebook React

REACT2SHELL 🎯 Quick Overview What is this? This tool is...

10CVSS7.7AI score0.99802EPSS
SaveExploits389
NCSC
NCSC
added 2025/12/12 9:29 a.m.19 views

Vulnerabilities fixed in SAP Software

SAP has fixed multiple vulnerabilities in several products, including SAP Solution Manager, SAP jConnect, SAP Web Dispatcher, SAP NetWeaver, SAP S/4 HANA Private Cloud, and SAP BusinessObjects. The vulnerabilities include code injection, deserialization, and insufficient input validation, which c...

9.9CVSS7.4AI score0.67821EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/12 9:23 a.m.10 views

EUVD-2025-203068

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

8.8CVSS8.1AI score0.00904EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/12 9:23 a.m.4 views

CVE-2025-26866 Apache HugeGraph-Server: RAFT and deserialization vulnerability

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

8.3AI score0.00904EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/12 9:23 a.m.43 views

CVE-2025-26866 Apache HugeGraph-Server: RAFT and deserialization vulnerability

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

0.00904EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/12 9:23 a.m.9 views

CVE-2025-26866 Apache HugeGraph-Server: RAFT and deserialization vulnerability

A remote code execution vulnerability exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict cluster membership and implements a strict class whitelist to harden the Hessian serialization process...

8.8CVSS6.6AI score
SaveExploits0References6
CVE
CVE
added 2025/12/12 9:23 a.m.49 views

CVE-2025-26866

CVE-2025-26866 affects Apache HugeGraph-Server (HugeGraph-Server PD store) via insecure Hessian deserialization and RAFT-related manipulation, enabling remote code execution. Multiple sources describe a server-side deserialization vulnerability stemming from Hessian deserialization, with the miti...

8.8CVSS8.3AI score0.00904EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder