CVE-2025-53770

CVE-2025-53770 检测项目 一个全面的漏洞检测工具包，用于识别易受 CVE-2025-53770 （CWE-502：不可信数据反序列化）影响的系统。 🔍 概述 本项目提供企业级检测脚本，用于识别和评估可能受 CVE-2025-53770 影响的系统。该安全漏洞与不可信数据的不安全反序列化相关。工具包包含 PowerShell 和 Python 两种实现，以确保在不同环境中的最大兼容性。 漏洞详情 CVE ID : CVE-2025-53770 CWE 分类 : CWE-502（不可信数据反序列化） 严重性 : 可变（取决于实现和暴露程度） 描述 :...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — PoC de deserialización no confiable en node-serialize RCE ⚠️ Solo para laboratorio / autoevaluación. Úsalo únicamente en sistemas que poseas o estés autorizado a probar. Este repositorio proporciona: Un script PoC mínimo para reproducir CVE-2017-5941 contra una aplicación Node.js...

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

CVE-2026-21531

Omisión de Funciones de Seguridad en ASP.NET Core de Microsoft CVE-2026-21531 🌟 Descripción Una vulnerabilidad en el SDK de Azure facilita la deserialización de datos no confiables, lo que permite a atacantes no autorizados ejecutar código arbitrario a través de la red. ⚙️ Instalación Para...

RCE-NodeJs

node-serialize — CVE-2017-5941 Nota: Este documento es solo con fines defensivos y educativos. No incluye instrucciones para crear exploits o RCE. Resumen: node-serialize 0.0.4 y versiones antiguas similares puede suponer un riesgo debido a la deserialización no confiable: valide siempre los dato...

CVE-2023-6933

Introducción a la vulnerabilidad CVE-2023-6933 Descripción El plugin "Better Search Replace" para WordPress presenta una vulnerabilidad crítica conocida como Inyección de Objetos PHP PHP Object Injection. Esta falla de seguridad está presente en todas las versiones hasta la 1.4.4 inclusive. Surge...

CVE-2026-87719 Deserialization of Untrusted Data in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance...

CVE-2026-65772

CVE-2026-65772 is a deserialization of untrusted data flaw in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to execute code over a network. The CVSS 3.1 score is 8.8 (High) with high impact to confidentiality, integrity, and availability, and no user inter...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12745

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

EUVD-2026-72695

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contributor-level access and above, to injec...

CVE-2026-71374

CVE-2026-71374 is a deserialization of untrusted data vulnerability in Hitachi Cosminexus Component Container , rated CVSS 9.8 (CRITICAL) with a network attack vector requiring no privileges and causing high impact to confidentiality, integrity, and availability. The vulnerable versions span from...

CVE-2026-61771

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61761

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61763

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61762

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61768

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61754

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61757

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61759

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...