5270 matches found
ReparcelBug2
CVE-2021-0928, writeToParcel/createFromParcel serialization mismatch in android.hardware.camera2.params.OutputConfiguration This is exploit using that vulnerability for privilege escalation from installed Android app into Android Settings app or any other app installed app could send to declared ...
CVE-2026-33725
CVE-2026-33725 A proof-of-concept exploit for CVE-2026-33725, a Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import in Metabase. Vulnerable Versions Metabase Enterprise ā„ v1.47 and v1.54.22 Metabase Enterprise ā„ v1.54.0 and v1.54.22 Metabase...
CVE-2021-43297-POC
CVE-2021-43297 Vulnerability Description Apache Dubbo Hessian-Lite 3.2.11 and earlier versions contain a potential RCE attack risk. When Hessian-Lite encounters a serialization exception, it outputs related information, which may trigger the toString method of certain maliciously crafted Beans,...
EUVD-2026-95034
A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...
CVE-2026-107623 Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation
A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...
CVE-2026-107623
A flaw exists in the OIDC Dynamic Client Registration (DCR) component of Keycloak . A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...
ecp_slap
ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...
CVE-2023-34040
CVE-2023-34040 EjecuciĆ³n remota de cĆ³digo por deserializaciĆ³n en Spring Kafka POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0...
Dassault SystĆØmes DELMIA Apriso (up to 2025) - Insecure Deserialization
A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. id: CVE-2025-5086 info: name: Dassault SystĆØmes DELMIA Apriso up to 2025 - Insecure Deserialization author: hacktronai,iamnoooob,pdresearch...
CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-XJ20290 undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON
CVE-2026-84961 affects multiple packages. undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. See references for individual vulnerability details...
CLEANSTART-2026-QL19617 fast-uri serializes the port component of a URI without validating it
Security vulnerability affects the langfuse package. fast-uri serializes the port component of a URI without validating it...
Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in Apache Log4j
Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities disclosed in Apache Log4j. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during...
cve-2025-32434-poc
CVE-2025-32434 Description Technical Details The vulnerability entry point is load in torch/serialization.py when protection weightsonly is enabled: loading a tar file would call these functions in chain: 1. load: torch/serialization.py:1117 2. loadlegacy: torch/serialization.py:1376 to...
CLEANSTART-2026-SN07875 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CVE-2025-68664-LangGrinch-PoC
š Table of Contents šÆ Executive Summary š Project Structure š Quick Start š Vulnerability Deep Dive š¬ Technical Root Cause Analysis āļø Attack Chain Methodology š Payload Arsenal 55+ š® Operator's Strategy Guide...
langgrinch-cve-2025-68664-analysis
LangGrinch Vulnerability Analysis: CVE-2025-68664 Overview This repository contains a technical report analyzing CVE-2025-68664, also known as LangGrinch, a serialization injection vulnerability affecting LangChain Core. The report explains the vulnerability background, root cause, exploitation...
CLEANSTART-2026-ON00136 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
Security vulnerability affects the sonarqube package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...
Astra Linux ā Vulnerability in Jackson-Databind
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...
Astra Linux ā Vulnerability in Jackson-Databind
FasterXML Jackson-Databind 2.x versions before 2.9.10.8 mishandle the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool...