Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-664...

Exploit for Deserialization of Untrusted Data in Facebook React

PoC-react2...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-5582 RCE A self-use checking tool for detecting the...

CVE-2025-66631

CSLA .NET prior to 6.0.0 is vulnerable to remote code execution during deserialization when using WcfProxy, which relies on the obsolete NetDataContractSerializer (NDCS). Supported details from multiple sources show that versions 5.5.4 and below are affected, while version 6.0.0 and above remove ...

CVE-2025-66631 CSLA .NET is vulnerable to Remote Code Execution via WcfProxy

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

CVE-2025-42928 Deserialization Vulnerability in SAP jConnect - SDK for ASE

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability resulting in high impact on confidentiality, integrity and...

CVE-2025-42928

CVE-2025-42928 describes a deserialization vulnerability in SAP jConnect (SDK for ASE) that could allow remote code execution when a specially crafted input is processed. The issue is exploitable by a high-privilege user and is capable of impacting confidentiality, integrity, and availability. SA...

CVE-2025-42928 Deserialization Vulnerability in SAP jConnect - SDK for ASE

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability resulting in high impact on confidentiality, integrity and...

PT-2025-49862

🧵 6/15: The Exploit simplified: The vulnerability CVE-2024-555182 lies in the deserialization process. React wasn't verifying if a requested key actually existed on the object during this process. This allows an attacker to sneak in a request for the constructor of a function...

NVIDIA Merlin Transformers4Rec 代码问题漏洞

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a deserialization vulnerability that originates from unsafe deserialization processing of serialized data submitted by a user when...

PT-2025-50110

Name of the Vulnerable Software and Affected Versions NVIDIA Merlin Transformers4Rec for Linux affected versions not specified Description The NVIDIA Merlin Transformers4Rec software contains a flaw within the Trainer component that could allow a user to trigger a deserialization issue...

WordPress plugin WP Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-50222

Name of the Vulnerable Software and Affected Versions Ladybug versions prior to 3.0-20251107.114628 Description Ladybug is a tool that adds message-based debugging, unit, system, and regression testing to Java applications. The software contains the API endpoints /iaf/ladybug/api/report/storage a...

Ladybug debug 安全漏洞

Ladybug debug is an open source debugging and testing tool from WeAreFrank! A security vulnerability exists in versions prior to Ladybug debug 3.0-20251107.114628, which stems from a deserialization vulnerability that could lead to remote code execution...

SAP jConnect 代码问题漏洞

SAP jConnect is a database connectivity software from SAP, a German company. A code issue vulnerability exists in SAP jConnect that stems from a deserialization vulnerability that could lead to remote code execution...

PT-2025-49773

Name of the Vulnerable Software and Affected Versions SAP jConnect affected versions not specified Description A high privileged user could exploit a deserialization issue in SAP jConnect, potentially leading to remote code execution. The issue may occur when specially crafted input is processed...

PT-2025-49911

CVE-2025-67535 Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Maps wp-google-map-plugin allows Object Injection.This issue affects W… https://t.co/oSmbMyC08D...

Security Bulletin: NVIDIA Merlin - December 2025

NVIDIA has released an update for Merlin to address a security issue that might lead to the impacts described in this bulletin. To protect your system, clone or update this software to include the following commits: Commit 5dd11f4 or later from NVIDIA Merlin/NVTabular Commit 876f19e or later from...

NVIDIA NVTabular 代码问题漏洞

NVIDIA NVTabular is a component of a deep learning recommender system framework from NVIDIA, USA. A deserialization vulnerability exists in NVIDIA NVTabular, which arises from unsafe deserialization of serialized data received from users by the Workflow component and can be exploited by an attack...

PT-2025-49778

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...