CVE-2023-43208_Detection_PoC

CVE-2023-43208DetectionPoC Utiliser java.net.InetAddress pour la détection POST /api/users HTTP/1.1 Host: ip:8443 User-Agent: Mozilla/5.0 X11; CrOS x8664 14541.0.0 AppleWebKit/537.36 KHTML, like Gecko Chrome/120.0.0.0 Safari/537.36 Connection: keep-alive Content-Length: 1964 Content-Type:...

CVE-2025-24813

CVE-2025-24813 الوصف يهدف هذا المستودع إلى توفير إرشادات واضحة للنشر السريع لـ Tomcat v9.0.90 مع java 25.0.1 2025-10-21 LTS على Windows Server 2019 Standard لممارسة محاكاة التهديدات في الأمن السيبراني. يستخدم exploit.py ملف ysoserial-all.jar لإنشاء حمولة باستخدام وحدة CommonsCollections6 في...

CVE-2026-33439-PoC

CVE-2026-33439 — RCE pré-authentification dans OpenAM Exécution de code à distance avant authentification dans OpenIdentityPlatform OpenAM = 16.0.5 via une désérialisation Java non sécurisée du paramètre jato.clientSession CVSS 9.8. Pour des tests de sécurité autorisés uniquement. Démarrage rapid...

CVE-2026-33439-Poc

CVE-2026-33439 RCE pré-authentification dans OpenIdentityPlatform OpenAM via une désérialisation Java non sécurisée du paramètre jato.clientSession. Affecté & /dev/tcp/HOST/PORT 0&1' La sortie est aveugle. La requête se bloque jusqu'à ce que la commande se termine, donc le timing confirme...

CVE-2026-33439

🐞 CVE-2026-33439: تنفيذ التعليمات البرمجية عن بُعد قبل المصادقة في OpenAM عبر إلغاء تسلسل jato.clientSession رؤية بشرية + تحليل بمساعدة الذكاء الاصطناعي + هندسة عكسية + استشارة ← استغلال أول تنفيذ استغلال مُشارك علنًا لـ CVE-2026-33439 ثغرة إلغاء تسلسل Java غير مصادق عليها في ForgeRock OpenAM تسم...

CVE-2015-6420

CVE-2015-6420 Vulnérabilité de désérialisation Références Analyse de la chaîne d'exploitation CC de la vulnérabilité de désérialisation Java...

CVE-2026-55083

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

CVE-2026-55083 DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

CVE-2026-55083 DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

CVE-2026-55083

The information system DHIS2 is vulnerable to remote code execution (RCE) due to unsafe Java deserialization . This vulnerability affects versions 2.42.0 to before 2.42.5.1 and 2.43.0 to before 2.43.0.1 . An attacker could exploit this flaw to execute arbitrary code on the system. Remediation is ...

CVE-2026-55083 DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

EUVD-2026-91002

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

vulscan

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

CVE-2026-55083: Deserialization of Untrusted Data

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution RCE via unsafe Java deserialization. This issue has been...

PT-2026-103971

Name of the Vulnerable Software and Affected Versions DHIS2 versions 2.42.0 through 2.42.5.0 DHIS2 version 2.43.0 Description Remote code execution RCE is possible due to unsafe Java deserialization, a process where untrusted data is used to reconstruct an object in memory, potentially allowing a...

Exploit for CVE-2026-82384

CVE-2026-82384 — Apache Roller 6.1.5 XML-RPC deserialization...

CVE-2026-67615

openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java deserialization in the HTTP invoker endpoint at /invoker/. Attackers can bypass the class-name denylist enforced by...

CVE-2026-67615 openEQUELLA < 2026.1.0 Authenticated RCE via Java Deserialization in HTTP Invoker

openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java deserialization in the HTTP invoker endpoint at /invoker/. Attackers can bypass the class-name denylist enforced by...

EUVD-2026-84866

openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java deserialization in the HTTP invoker endpoint at /invoker/. Attackers can bypass the class-name denylist enforced by...

CVE-2026-67615

The openEQUELLA software prior to version 2026.1.0 is vulnerable to authenticated remote code execution (RCE) via Java deserialization in the HTTP invoker endpoint at /invoker/*. An authenticated non-guest user can bypass the PluginAwareObjectInputStream class-name denylist by nesting a serialize...