10 matches found
CVE-2020-2883
what's this This project which based weblogiccmd is a poc for CVE-2020-2883. Two Gadget First: ObjectInputStream.readObject PriorityQueue.readObject PriorityQueue.heapify PriorityQueue.siftDown siftDownUsingComparator com.tangosol.util.comparator.ExtractorComparator.compare...
Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam
CVE-2026-33439 — clean-room OpenAM PoC This package rebuilds...
Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam
CVE-2026-33439 — OpenAM Pre-Auth RCE Pre-authentication Remot...
PT-2026-53942
Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.1.6 Description Three ObjectInputStream subclasses WsObjectInputStream, ObjectStreamPool$ReusableInputStream, and ObjectInputStreamResolver do not install a JEP-290 class filter, which i...
CVE-2021-39150 A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...
CVE-2021-39150 A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime version 14 to 8. ...
OSV-2020-596 UNKNOWN READ in ot::PriorityQueue::GetHead
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13388 Crash type: UNKNOWN READ Crash state: ot::PriorityQueue::GetHead ot::Ip6::Ip6::HandleSendQueue ot::TaskletScheduler::ProcessQueuedTasklets...
PT-2020-22417
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including PriorityQueue::GetHead,...
PT-2020-22419
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including GetPriority, RemoveFromList, and Dequeue, which...