CVE-2026-50522

🛡️ CVE-2026-50522 — Microsoft SharePoint RCE Investigation Critical SharePoint Deserialization Vulnerability Under Active Exploitation Created by Pratik Chhetri Report Date: 2026-07-27 📌 Executive Snapshot Field| Finding ---|--- Vulnerability| CVE-2026-50522 Product| Microsoft SharePoint Server...

cve-2017-5941-poc-docker-lab

CVE-2017-5941 — node-serialize Untrusted Deserialization RCE PoC ⚠️ For lab / self-assessment only. Use only on systems you own or are authorized to test. This repository provides: A minimal PoC script to reproduce CVE-2017-5941 against a vulnerable Node.js app that uses node-serialize = 0.0.4. Tw...

CVE-2025-53770

CVE-2025-53770 Detection Project A comprehensive vulnerability detection toolkit for identifying systems vulnerable to CVE-2025-53770 CWE-502: Deserialization of Untrusted Data. 🔍 Overview This project provides enterprise-ready detection scripts to identify and assess systems potentially vulnerab...

CVE-2026-68771_exploit

CVE-2026-68771 — ComfyUI Unauthenticated Pickle Deserialization RCE Unauthenticated remote code execution in ComfyUI via the LoadTrainingDataset node. LoadTrainingDataset.execute loads dataset shards from the server's output directory with torch.loadf and noweightsonly=True. On PyTorch /tmp/pwned...

CVE-2026-44963

CVE-2026-44963 — Veeam Backup & Replication RCE Research repository bySentinelX — for authorized security testing and defensive purposes only. Overview Field| Detail ---|--- CVE ID| CVE-2026-44963 Vendor| Veeam Product| Backup & Replication Affected Versions| 12.3.2.4854 all v12 builds Fixed...

CVE-2026-20131-Post-Incident-Written-Report

CVE-2026-20131-事后事件书面报告 本事后事件报告分析了CVE-2026-20131的利用情况，这是思科安全防火墙管理中心（FMC）中一个严重的零日未认证远程代码执行（RCE）漏洞。本文档涵盖了通过Java对象反序列化（CWE-502）的初始入侵向量、Interlock勒索软件组织使用的威胁行为者战术、网络枚举工作流程以及取证时间线。它详细说明了根本原因调查结果、关于网络分段的经验教训，以及涵盖即时修补、账户审计和零信任实施的分阶段修复策略。...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start 🐛 Vulnerability Deep Dive 🔬 Technical Root Cause Analysis ⚔️ Attack Chain Methodology 💀 Payload Arsenal 55+ 🎮 Operator's Strategy Guide...

langgrinch-cve-2025-68664-analysis

LangGrinch Vulnerability Analysis: CVE-2025-68664 Overview This repository contains a technical report analyzing CVE-2025-68664, also known as LangGrinch, a serialization injection vulnerability affecting LangChain Core. The report explains the vulnerability background, root cause, exploitation...

Security Bulletin: Multiple security vulnerabilities have been identified in Python packages shipped with IBM Guardium Cryptography Manager (GCM)

Summary Multiple security vulnerabilities identified in Python packages shipped with IBM Guardium Cryptography Manager GCM have been addressed Vulnerability Details CVEID:CVE-2026-48775 DESCRIPTION: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB...

cotonti-commentswidget-poc

Cotonti CommentsWidget PHP 对象注入 PoC 针对 Cotonti 的 CommentsWidget 实现中发现的 PHP 对象注入问题的安全本地概念验证。 漏洞 项目： Cotonti 受影响组件： plugins/comments/inc/CommentsWidget.php CWE： CWE-502 — 不可信数据的反序列化 CVE/候选编号： CAN-2026-2035973 / CVE-2026-71294 研究员： Harsh Raj Singhania 存在漏洞的代码路径接受 ci GET 参数，并将攻击者控制的数据通过 base64decode ...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB Deserialization PoC Proof-of-Concept for a deserialization vulnerability in pdfminer.six that leads to arbitrary code execution when parsing a crafted PDF. PURPOSE / LEGAL DISCLAIMER This repository is provided for educational and authorized security research...

Security Bulletin: jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator 3.4

Summary jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator Vulnerability Details CVEID:CVE-2019-10172 DESCRIPTION: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehau...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution. id: CVE-2020-10189 info: name: ManageEngine Desktop Central Java Deserialization author: king-alexander severity: critical description: | Zoho ManageEngine...

Deserialization of Untrusted Data

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the machine learning component when processing trained model artifacts. An attacker can execu...

Security Bulletin: NVIDIA Megatron Bridge - September 2026

NVIDIA has released a software update for NVIDIA® Megatron Bridge. To protect your system, clone or update this software to version 0.5.1 or later from the NVIDIA/Megatron-Bridge GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software update for NVIDIA® Megatron Bridge...

EUVD-2026-67870

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

Deserialization of Untrusted Data

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the deserialization. An attacker can execute arbitrary code by submitting a crafted GraphQL request containing...

Deserialization of Untrusted Data

Overview org.springframework.batch:spring-batch-core is a framework for writing offline and batch applications using Spring and Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the JobParameterDeserializer. An attacker can execute arbitrary code by...

Security Bulletin: IBM Terracotta is affected by Logback vulnerabilities that could allow deserialization of untrusted data resulting in object injection

Summary IBM Terracotta uses Logback for logging purposes within the product. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit...