CVE-2020-9484

CVE-2020-9484 Kali 2.0으로 Apache Tomcat Session 역직렬화 코드 실행 취약점 CVE-2020-9484 재현 환경： 1. Kali 2.0 2. apache-tomcat-7.0.61-CVE-2020-9484.tar.gz（webapp은 s2-053이고, 해당 lib에 commons-collections4-4.0.jar를 추가함） 시작 /yourtomcatdir/bin/startup.sh payload 생성 java -jar ysoserial-0.0.6-SNAPSHOT-all.jar...

CVE-2025-24813

CVE-2025-24813 - Exploit d'exécution de code à distance dans Apache Tomcat Ceci est un exploit de preuve de concept PoC pour CVE-2025-24813 , une vulnérabilité dans Apache Tomcat 9.0.80–9.0.83, 10.1.0–10.1.17 qui permet l'exécution de code à distance RCE via la désérialisation de session. L'explo...

CVE-2025-24813

Эксплойт-комплект CVE-2025-24813 Это продвинутый автоматизированный инструмент для эксплуатации CVE-2025-24813 , нацеленный на серверы Apache Tomcat, уязвимые к небезопасной десериализации сессий. 🔍 Возможности Сканирование нескольких целей из файла или по одному URL --targets / --url...

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Exécution de code à distance via désérialisation de session PUT partiel non authentifié + traversée de chemin + désérialisation pilotée par gadget Description Les instances Apache Tomcat avec le servlet par défaut PUT activé readonly=false permettent d'écrire des...

Spring-Boot-Tomcat-CVE-2025-24813

CVE-2025-24813: Apache 1. Explication Tomcat est vulnérable à cause de deux vulnérabilités distinctes, la première est une faiblesse dans DefaultServlet qui permet des écritures partielles pour écrire dans un répertoire temporaire. voir :...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Exécution-de-code-à-distance-via-la-désérialisation-de-session-CVE-2025-24813- Apache Tomcat - Exécution de code à distance via la désérialisation de session CVE-2025-24813...

EUVD-2026-54568

In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...

PYSEC-2026-2865 pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager

Deserialization of untrusted data CWE-502 in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directo...

CVE-2026-7818

Deserialization of untrusted data CWE-502 in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directo...

Exploit for Code Injection in Craftcms Craft_Cms

CVE-2025-32432 Here's the updated README file, now including t...

pyLoad: Unprotected storage_folder enables arbitrary file write to Flask session store and code execution (Incomplete fix for CVE-2026-33509)

Summary The fix for CVE-2026-33509 GHSA-r7mc-x6x7-cqxx added an ADMINONLYOPTIONS set to block non-admin users from modifying security-critical config options. The storagefolder option is not in this set and passes the existing path restriction because the Flask session directory is outside both...

CVE-2026-2646

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...

Linux Distros Unpatched Vulnerability : CVE-2026-2646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate a...

Heap-based Buffer Overflow

Overview wolfssl is a Python module that encapsulates wolfSSL's C SSL/TLS library. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the wolfSSLd2iSSLSESSION function when deserializing session data with the SESSIONCERTS option enabled. An attacker can corrupt heap...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the wolfSSLd2iSSLSESSION function when deserializing session data with the SESSIONCERTS option enabled. An attacker can corrupt heap memory and potentially execute arbitrary code or cause a crash by supplyi...

DEBIAN-CVE-2026-2646

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...

CVE-2026-2646

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...

UBUNTU-CVE-2026-2646

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...

CVE-2026-2646 Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...

CVE-2026-2646

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSLd2iSSLSESSION function. When deserializing session data with SESSIONCERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and...