29635 matches found
📄 React / Next.js Unauthenticated Remote Code Execution
A critical unauthenticated remote code execution vulnerability exists in React Server Components RSC Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with proto, constructor, o...
PT-2025-49911
CVE-2025-67535 Deserialization of Untrusted Data vulnerability in WePlugins - WordPress Development Company WP Maps wp-google-map-plugin allows Object Injection.This issue affects W… https://t.co/oSmbMyC08D...
PT-2025-50223
Name of the Vulnerable Software and Affected Versions Apache HugeGraph-Server versions prior to 1.7.0 Description A remote code execution issue exists where a malicious Raft node can exploit insecure Hessian deserialization within the PD store. The fix enforces IP-based authentication to restrict...
PT-2025-50283
Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, and 2021.22 and earlier Description A Deserialization of Untrusted Data issue exists that could lead to arbitrary code execution with the privileges of the current user. A high-privileged attacker could...
CSLA .NET 代码问题漏洞
CSLA .NET is an open source software development framework from Marimer LLC. It helps users build reusable and maintainable object-oriented business layers for applications. A code issue vulnerability exists in CSLA .NET 5.5.4 and prior versions that stems from improper deserialization and could...
Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
Impact Versions of CSLA .NET prior to version 6 allow the use of WcfProxy. WcfProxy uses the NetDataContractSerializer NDCS which has known vulnerabilities that can allow remote execution of code during deserialization. NDCS itself is considered obsolete, and you should avoid using WcfProxy or...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182: Exploitation Artifacts An export of a small s...
Security Bulletin: IBM webMethods Integration (on prem) is affected by arbitrary code execution
Summary IBM webMethods Integration on prem uses java objects for displaying graph data CVE-2025-36072 Vulnerability Details CVEID:CVE-2025-36072 DESCRIPTION: IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted...
Exploit for Deserialization of Untrusted Data in Facebook React
Used to reproduce CVE-2025...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in the JDBC driver for Apache Hive
Summary Multiple vulnerabilities in the JDBC driver for Apache Hive that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-58163 DESCRIPTION: FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Next.js RCE Exploit Tool 中文文档./README.zh-CN...
Exploit for Deserialization of Untrusted Data in Facebook React
🧨 React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React2Shell PoC A proof of concept exploit f...
Exploit for Deserialization of Untrusted Data in Facebook React
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Security Tool CVE-2025-55182 & CVE-2025-66478...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell 취약점 실습 사용된 AI : Claude Opus 4.5...
Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax
CVE-2019-18935 Nuclei Template - Bounty Submission This repos...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2...