94 matches found
CVE-2026-50522
CVE-2026-50522 Poc : SharePoint Deserialisierung RCE Nicht authentifizierte Remotecodeausführung über SecurityContextToken-Cookie-Deserialisierung Massenscan-Exploit für CVE-2026-50522, der lokale Microsoft SharePoint Server-Installationen angreift. Nutzt unsichere BinaryFormatter-Deserialisierun...
CVE-2024-40711
CVE-2024-40711 Exploit para a desserialização pré-auth no Veeam backup and Replication CVE-2024-40711 Veja nosso post no blog para detalhes técnicos https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC em Ação root@kitploit: CVE-2024-40711.exe -f binaryformatter -g...
sharepoint-2026-poc
Desserialização WS-Federation /trust do SharePoint: PoC e notas de detecção Artigo ao vivo GitHub Pages: https://sp-poc.wismansec.com/ renderização HTML deste documento. Afetados: SharePoint Server 2016, 2019 e Subscription Edition. Reconstrução de uma intrusão em um SharePoint Server Subscriptio...
CVE-2024-40711-Exp
Usi root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp,...
CVE-2025-53691
CVE-2025-53691: Esecuzione di codice in remoto RCE tramite deserializzazione insicura Lo stesso meccanismo di reflection in AjaxScriptManager può essere utilizzato per invocare il metodo ProcessSerializedData. Questo metodo deserializza un payload fornito utilizzando l'insicuro BinaryFormatter,...
Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
Microsoft SharePoint Server 2016, 2019, Subscription Edition = 2026.3.1 contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint /trust/default.aspx. The SharePoint authentication module SPFederationAuthenticationModuleV2 uses a deflate-only...
CVE-2025-59287
في هذه الدراسة، سنفحص ثغرة أمنية حرجة CVE-2025-59287 تم اكتشافها في بيئة Microsoft Windows Server Update Services WSUS. تنشأ هذه الثغرة من إلغاء التسلسل غير الآمن لكائنات AuthorizationCookie المرسلة إلى نقطة النهاية GetCookie، حيث يتم فك تشفير بيانات ملفات تعريف الارتباط المشفرة باستخدام...
CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit
CVE-2026-56158 — Exploit PoC di Esecuzione Remota di Codice RCE in .NET Framework Critico CVSS 9.8 — Deserializzazione di dati non attendibili CWE-502 in Microsoft .NET Framework e .NET Runtime Corretto: 14 luglio 2026 | Attribuito a: Positive Technologies PT-2026-60174 Indice Panoramica Dettagli...
SharePoint-CVE-2025-53770-POC
OurSharePoint - CVE-2025-53770 PoC Questo è un semplice strumento C che costruisce un payload .NET DataSet compresso con GZip e codificato in Base64, utilizzando un payload interno codificato con LosFormatter. È progettato per aiutare a riprodurre la catena RCE di deserializzazione di SharePoint...
GadgetToJScript
विवरण यह .NET सीरियलाइज़्ड गैजेट्स जनरेट करने का एक टूल है, जो JS/VBS/VBA स्क्रिप्ट्स से BinaryFormatter का उपयोग करके डीसीरियलाइज़ किए जाने पर .NET असेंबली लोड/निष्पादन को ट्रिगर कर सकते हैं। वर्तमान गैजेट jscript/vbscript/vba से BinaryFormatter का उपयोग करके डीसीरियलाइज़ किए जाने पर...
sharepoint-2026-poc
SharePoint /trust WS-Federation Deserialization — PoC & Det...
CVE-2026-25551 Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service
Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-privileged local users to escalate privileges. The DataServiceSingleton .NET Remoting endpoint is bound to localhost on TCP port 7375 via BtSystem.Service.exe, limiting the attack...
CVE-2026-27749
Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\\ProgramData using .NET BinaryFormatter without...
EUVD-2026-9821
Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\ProgramData using .NET BinaryFormatter without...
CVE-2026-27749
Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\ProgramData using .NET BinaryFormatter without...
CVE-2026-27749 Avira Internet Security System Speedup Insecure Deserialization
Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\ProgramData using .NET BinaryFormatter without...
Exploit for CVE-2026-26221
📡 Hyland OnBase Timer Service Unauthenticated RCE Mohamm...
Exploit for CVE-2025-59287
In this study, we will examine a critical vulnerability CVE-202...