Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell !Languagehttps://img.shields.io/badge/Language...

Exploit for Deserialization of Untrusted Data in Facebook React

⚡ CVE-2025-55182 – Advanced Auto Exploit Toolkit Precisi...

Exploit for Deserialization of Untrusted Data in Facebook React

⚡ CVE-2025-55182 – Auto Exploit Toolkit Precision Engine...

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-664...

Exploit for Deserialization of Untrusted Data in Facebook React

PoC-react2...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-5582 RCE A self-use checking tool for detecting the...

CVE-2025-66631

CSLA .NET prior to 6.0.0 is vulnerable to remote code execution during deserialization when using WcfProxy, which relies on the obsolete NetDataContractSerializer (NDCS). Supported details from multiple sources show that versions 5.5.4 and below are affected, while version 6.0.0 and above remove ...

CVE-2025-66631 CSLA .NET is vulnerable to Remote Code Execution via WcfProxy

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

CVE-2025-42928

CVE-2025-42928 describes a deserialization vulnerability in SAP jConnect (SDK for ASE) that could allow remote code execution when a specially crafted input is processed. The issue is exploitable by a high-privilege user and is capable of impacting confidentiality, integrity, and availability. SA...

CVE-2025-42928 Deserialization Vulnerability in SAP jConnect - SDK for ASE

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability resulting in high impact on confidentiality, integrity and...

CVE-2025-42928 Deserialization Vulnerability in SAP jConnect - SDK for ASE

Under certain conditions, a high privileged user could exploit a deserialization vulnerability in SAP jConnect to launch remote code execution. The system may be vulnerable when specially crafted input is used to exploit the vulnerability resulting in high impact on confidentiality, integrity and...

WordPress plugin WP Maps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2025-50110

Name of the Vulnerable Software and Affected Versions NVIDIA Merlin Transformers4Rec for Linux affected versions not specified Description The NVIDIA Merlin Transformers4Rec software contains a flaw within the Trainer component that could allow a user to trigger a deserialization issue...

NVIDIA Merlin Transformers4Rec 代码问题漏洞

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a deserialization vulnerability that originates from unsafe deserialization processing of serialized data submitted by a user when...

Ladybug debug 安全漏洞

Ladybug debug is an open source debugging and testing tool from WeAreFrank! A security vulnerability exists in versions prior to Ladybug debug 3.0-20251107.114628, which stems from a deserialization vulnerability that could lead to remote code execution...

SAP jConnect 代码问题漏洞

SAP jConnect is a database connectivity software from SAP, a German company. A code issue vulnerability exists in SAP jConnect that stems from a deserialization vulnerability that could lead to remote code execution...

PT-2025-49862

🧵 6/15: The Exploit simplified: The vulnerability CVE-2024-555182 lies in the deserialization process. React wasn't verifying if a requested key actually existed on the object during this process. This allows an attacker to sneak in a request for the constructor of a function...

PT-2025-50222

Name of the Vulnerable Software and Affected Versions Ladybug versions prior to 3.0-20251107.114628 Description Ladybug is a tool that adds message-based debugging, unit, system, and regression testing to Java applications. The software contains the API endpoints /iaf/ladybug/api/report/storage a...

PT-2025-49778

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

PT-2025-49773

Name of the Vulnerable Software and Affected Versions SAP jConnect affected versions not specified Description A high privileged user could exploit a deserialization issue in SAP jConnect, potentially leading to remote code execution. The issue may occur when specially crafted input is processed...