CVE-2023-6933

Introducción a la vulnerabilidad CVE-2023-6933 Descripción El plugin "Better Search Replace" para WordPress presenta una vulnerabilidad crítica conocida como Inyección de Objetos PHP PHP Object Injection. Esta falla de seguridad está presente en todas las versiones hasta la 1.4.4 inclusive. Surge...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — PoC de deserialización no confiable en node-serialize RCE ⚠️ Solo para laboratorio / autoevaluación. Úsalo únicamente en sistemas que poseas o estés autorizado a probar. Este repositorio proporciona: Un script PoC mínimo para reproducir CVE-2017-5941 contra una aplicación Node.js...

CVE-2025-53770

Proyecto de Detección CVE-2025-53770 Un kit de herramientas integral de detección de vulnerabilidades para identificar sistemas vulnerables a CVE-2025-53770 CWE-502: Deserialización de datos no confiables. 🔍 Descripción general Este proyecto proporciona scripts de detección listos para entornos...

CVE-2026-44963

CVE-2026-44963 — Veeam备份与复制远程代码执行漏洞 由SentinelX 维护的研究仓库 — 仅用于授权的安全测试和防御目的。 概述 字段| 详情 ---|--- CVE ID| CVE-2026-44963 供应商| Veeam 产品| Backup & Replication 受影响版本| 12.3.2.4854（所有 v12 构建版本） 修复版本| 12.3.2.4854 CVSS v4 评分| 9.4 — 严重 CVSS v3 评分| 8.8 — 高危 CWE| CWE-502（不可信数据反序列化） 发现者| Sina Kheirkhah @ WatchTow...

CVE-2026-21531

Omisión de Funciones de Seguridad en ASP.NET Core de Microsoft CVE-2026-21531 🌟 Descripción Una vulnerabilidad en el SDK de Azure facilita la deserialización de datos no confiables, lo que permite a atacantes no autorizados ejecutar código arbitrario a través de la red. ⚙️ Instalación Para...

RCE-NodeJs

node-serialize — CVE-2017-5941 备注: 本文档仅供防御和教育目的。不包含关于利用漏洞或创建RCE的指南。 概要: node-serialize（0.0.4及类似的旧版本）由于不安全的反序列化可能带来风险——在调用unserialize之前始终检查输入数据。 检测: 在代码中查找是否存在serialize.unserialize或node-serialize。检查解码后的base64 cookie/参数是否包含$$NDFUNC$$、function或eval。 缓解措施（快速）:...

CVE-2026-87719 Deserialization of Untrusted Data in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance...

CVE-2026-65772

CVE-2026-65772 is a deserialization of untrusted data flaw in Microsoft Dynamics 365 On-Premises that allows an authorized attacker (low privileges) to execute code over a network. The CVSS 3.1 score is 8.8 (High) with high impact to confidentiality, integrity, and availability, and no user inter...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12745

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

EUVD-2026-72695

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contributor-level access and above, to injec...

CVE-2026-71374

CVE-2026-71374 is a deserialization of untrusted data vulnerability in Hitachi Cosminexus Component Container , rated CVSS 9.8 (CRITICAL) with a network attack vector requiring no privileges and causing high impact to confidentiality, integrity, and availability. The vulnerable versions span from...

CVE-2026-61771

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61761

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61763

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61762

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61768

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61754

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61759

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61757

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...