CVE-2018-20062

CVE-2018-20062 ThinkPHP 5.0.23 — Проверка воздействия CVE-2018-20062 Уязвимые версии ThinkPHP 5.0.x 5.0.23 десериализация invokefunction Методология проверки Стандартная оценка воздействия для данной CVE выполняется в два этапа: 1. Проверка наличия — убедиться, что маршрут invokefunction доступен...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2019-10068-PoC

CVE-2019-10068 PoC для Kentico CMS Эксплойт-доказательство концепции для CVE-2019-10068, использующий десериализацию RCE в Kentico CMS для загрузки веб-шелла. Правовое предупреждение: Данное доказательство концепции предоставлено исключительно для образовательных целей и авторизованных исследован...

jsc_deobfuscator

JSC Deobfuscator Этот инструмент предназначен для статической деобфускации скомпилированного байт-кода V8 JavaScript, защищённого с помощью javascript-obfuscator. Он работает с псевдокодом, созданным View8, а не с исходным кодом JavaScript. Проект разрабатывался и тестировался на нагрузках JSCeal...

log4j2-rce

Log4j FilteredObjectInputStream Bypass Pre-auth RCE on any Java service that deserializes LogEvent through Log4j's FilteredObjectInputStream. No credentials needed. Reported as GitHub issue 4255 on August 24, 2026. What it does Log4j ships FilteredObjectInputStream FOIS as a safe deserialization...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-Post-Incident-Written-Report This post-incident report analyzes the exploitation of CVE-2026-20131, a critical zero-day unauthenticated Remote Code Execution RCE vulnerability in Cisco Secure Firewall Management Center FMC. The document covers the initial intrusion vector via Java...

yaml-payload-2

yaml-payload Эксплойт-пейлоад для десериализации SnakeYAML для CVE-2022-1471 , адаптированный из artsploit/yaml-payload изначально основан на mbechler/marshalsec. Что он делает При загрузке через небезопасный Yaml.load от SnakeYAML этот пейлоад перехватывает управление запущенным приложением и...

log4j-4255

log4j2 4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject A self-contained, containerised lab that reproduces Apache log4j2 issue4255 end-to-end against the official Log4j 2.26.1 artifacts on JDK 17 , with positive controls, a hardened oracle, and a validated...

CVE-2026-55083

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

CVE-2026-42779

CVE-2026-42779 — Apache MINA Deserialization Filter Bypass to RCE CVSS 3.1: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-502 Deserialization of Untrusted Data Reporter: Venkatraman Kumar, Securin Advisory: Apache Mailing List Overview Apache MINA versions 2.1.0 through 2.1.11 and 2.2...

CVE-2026-42778-POC

CVE-2026-42778 Overview Incomplete fix in Apache MINA AbstractIoBuffer.getObject method. The classname allowlist validation that restricts which classes can be deserialized is applied too late, after static initializers in classes being read may have already executed. This occurs because the...

learnjavabug

Данный проект предназначен исключительно для исследований в области безопасности. Запрещается использовать его для проведения незаконных атак; ответственность за последствия несёт пользователь Это личный проект для воспроизведения и публикации некоторых интересных или достаточно серьёзных...

nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Deserialization Vulnerability in Microsoft Office SharePoint 🚀 Overview This lab demonstrates a deserialization vulnerability in Microsoft Office SharePoint that enables remote code execution RCE. The issue arises from improper handling of untrusted serialized data within...

CVE-2026-33439-OpenAM

CVE-2026-33439 is a pre-auth unsafe deserialization issue in OpenAM 16.0.6 affecting JATO ViewBean endpoints. Public advisories mention JATO endpoints but do not enumerate reachable routes. This research identifies /openam/ui/PWResetUserValidation as a reachable pre-auth JATO endpoint...

CVE-2026-20131

CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...

CVE-2026-33701-Unsafe-Deserialization-in-OpenTelemetry-Java-Agent-RMI-Instrumentation

CVE-2026-33701 — Unsafe Deserialization in OpenTelemetry Java Agent RMI Instrumentation Severity: Critical CVSS v4.0: 9.3 Affected versions: opentelemetry-javaagent 2.26.1 Patched in: 2.26.1 released March 23, 2026 Overview OpenTelemetry is probably the most widely adopted observability framework...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

TheLastBundleMismatch

Mysterious patch Let's start this time with the patch that appeared as fix for CVE-2023-45777 in Android Security Bulletin: diff --git a/services/core/java/com/android/server/accounts/AccountManagerService.java b/services/core/java/com/android/server/accounts/AccountManagerService.java index...

CVE-2026-26221-Hyland-OnBase-Timer-Service-Unauthenticated-RCE

📡 Hyland OnBase Timer Service Unauthenticated RCE Mohammed Idrees Banyamer Security Researcher Jordan 🇯🇴 🧨 Overview This repository contains a Proof‑of‑Concept exploit for Hyland OnBase Timer Service unauthenticated remote code execution vulnerability via insecure .NET Remoting BinaryFormatter...