CVE-2021-28254

creationtimestamp| type| source ---|---|--- 2023-04-19 07:43:13+00:00| seen| https://t.me/cibsecurity/62430 2025-10-08 02:55:55+00:00| published-proof-of-concept| Telegram/b8pE1uyYjcpAx606oP52vG0GPeg0vTe6CkZMd4rswzCMYLs...

CVE-2021-28254

A deserialization vulnerability in the destruct function of Laravel v8.5.9 allows attackers to execute arbitrary commands...

CVE-2021-28254

CVE-2021-28254 affects Laravel v8.5.9. The vulnerability is in the destruct() deserialization path, enabling an attacker to execute arbitrary commands via crafted input. This is a remote, unauthenticated, network-exposed issue with high impact (C/H/I/A = 9.8/CRITICAL per CVSS 3.1). Some connected...