CVE-2021-23758-POC

CVE-2021-23758-POC этот репозиторий создан для обучения уязвимости в ajaxpro. раскрыта под идентификационным номером CVE-2021-23758. POC POST /ajaxpro/CVE202123758POC.demo,CVE202123758.ashx HTTP/2 Host: localhost:44375 Content-Length: 567 Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96"...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – XML 역직렬화 RCE리버스 셸 WSUS CVE-2025-59287을 XML 역직렬화를 통해 악용하여 Windows 리버스 셸을 획득하는 데 초점을 맞춘 PoC입니다. 이 스크립트는 리버스 셸 페이로드만 지원합니다calc 대체 없음. 대상: WSUS 역할이 설치된 Windows Server 기법: SOAP + ObjectDataProvider 역직렬화 결과: cmd.exe가 PowerShell 리버스 셸을 실행하여 리스너에 연결 면책 조항 랩 환경에서의 공인된...

CVE-2026-26208

ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application attempts to deserialize the App.txt settings file using Newtonsoft.Json with TypeNameHandling set to Objects. This allo...

CVE-2026-26208: Deserialization of Untrusted Data

ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application attempts to deserialize the App.txt settings file using Newtonsoft.Json with TypeNameHandling set to Objects. This allo...

SolarWinds Information Service (SWIS) .NET Deserialization From AMQP RCE

The SolarWinds Information Service SWIS is vulnerable to RCE by way of a crafted message received through the AMQP message queue. A malicious user that can authenticate to the AMQP service can publish such a crafted message whose body is a serialized .NET object which can lead to OS command...

. NET advanced code audit of the first six classes DataContractSerializer deserialization vulnerability-vulnerability warning-the black bar safety net

DataContractSerializer class is used for serialization and de-serialization in Windows Communication Foundation WCF message to send the data for the CLR data type is serialized into an XML stream, which is located in the namespace System. Runtime. Serialization, and inherits from the System...

. NET advanced code audit（second class） Json. Net deserialization vulnerability-vulnerability warning-the black bar safety net

Newtonsoft. Json, which is an open-source Json. Net library, the official address: https://www.newtonsoft.com/json a read and write Json, efficiency is very high. Net library, in the do develop the time, a lot of data exchange are based on the json format for transmission. While using Json, the...

DotNetNuke arbitrary code execution vulnerability(CVE-2017-9822)

0x00 background description DNN uses web cookies to identify users. A malicioususer can decode one of such cookies and identify who that user is, and possiblyimpersonate other users and even upload malicious code to the server. --DNNsecurity-center 2017 7 November 5, DNN security sector released ...