Node.js-CVE-2017-5941

عرض توضيحي لثغرة إزالة التسلسل غير الآمنة في NodeJS Node.js هي بيئة تشغيل مفتوحة المصدر تُستخدم لتنفيذ وظائف الخادم بلغة JavaScript. تحتوي حزمة برمجية محددة داخل Node.js على دالة ضعيفة تتعامل مع إزالة التسلسل، مما يؤدي إلى تنفيذ أوامر غير مصرح بها إذا قدم العميل ملف تعريف ارتباط مصنوعًا خصيصًا. ت...

craftcms-vcard-exploit

Vulnerabilidade de Desserialização no Plugin vCard do Craft CMS O Craft CMS possui um plugin para baixar contatos no formato de arquivo .vcf intitulado "vCard". O plugin pode ser revisado no repositório do Craft e no Github: Craft Plugin Store Github Descrição Este plugin recebe um parâmetro...

CVE-2018-15133-laravel-framework

CVE-2018-15133 - Verwundbares Lab für Laravel Framework 5.6.x Dieses Repository stellt ein reproduzierbares Docker-Lab für CVE-2018-15133 bereit Laravel Framework Token-Unserialize-RCE, wenn APPKEY bekannt ist. Die App ist auf eine verwundbare Laravel 5.6.x-Version festgelegt und stellt eine...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

CVE-2026-80428

ILIAS (e-learning platform) is vulnerable to unauthenticated PHP object injection via its Shibboleth back-channel endpoint (shib_logout.php). The endpoint's logout-notification handler deserialises all live session rows without restricting constructable classes, and runs in a context exempt from ...

phpggc

PHPGGC: Catene di Gadget Generici PHP PHPGGC è una libreria di payload unserialize insieme a uno strumento per generarli, da riga di comando o programmaticamente. Quando incontri una unserialize su un sito web di cui non hai il codice, o semplicemente quando cerchi di costruire un exploit, questo...

PHP-binary-bugs

Sicherheitshinweis zu Exploits AI POP Builder Sammlung von Sicherheitshinweisen zu PHP-Binary-Bugs Nicht behobene GMP-Typverwechslung in unserialize Idee: Verzögerte wakeup umgehen und den nicht behobenen GMP-Typverwechslungs-Bug in PHP = 5.6.40 ausnutzen POC-Quelle: GMPtypeconfPOC.php...

CVE-2026-3296

CVE-2026-3296 CVE-2026-3296 è una vulnerabilità critica di PHP Object Injection non autenticata CVSS 9.8 nel plugin WordPress Everest Forms. CVE-2026-3296 — Scanner per PHP Object Injection in Everest Forms Plugin: Everest Forms – Modulo di contatto, modulo di pagamento, quiz, sondaggio e builder...

CVE-2026-2898-FunAdmin-Deserialization

CVE-2026-2898 - FunAdmin Deserializzazione non sicura Riepilogo FunAdmin Dichiarazione di non responsabilità Solo per test educativi e autorizzati...

CVE-2026-77138

The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...

CVE-2026-56095

The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...

EUVD-2026-65350

The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...

CVE-2026-56095 Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...

CVE-2026-56095

The Apache Solr for TYPO3 – Enterprise Search (solr) extension is affected by an insecure deserialization flaw in its indexer. When transferring multi-value data for the SOLR_CLASSIFICATION , SOLR_MULTIVALUE , and SOLR_RELATION content object types, every field value returned by content object re...

CVE-2026-77138

CVE-2026-77138 affects the TYPO3 extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail) . The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safe processing, enabling PHP Object Injection . A remote, unauthenticated attacker can supply a ...

CVE-2026-77138 Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...

exploit_laravel_cve-2018-15133

Exploit Laravel per CVE-2018-15133 Questo codice sfrutta la CVE-2018-15133 e si basa sulla PoC di kosmiz e sull'exploit di Metasploit per questa vulnerabilità. L'ho fatto praticamente per una macchina su Hack The Box, perché al momento non volevo usare Metasploit e come scusa per esercitarmi con...

RCE-NodeJs

node-serialize — CVE-2017-5941 Hinweis: Dieses Dokument dient nur zu Verteidigungs- und Bildungszwecken. Es enthält keine Anleitungen zur Erstellung von Exploits oder RCE. Zusammenfassung: node-serialize 0.0.4 und ähnliche veraltete Versionen kann aufgrund unsicherer Deserialisierung ein Risiko...

Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection

The Everest Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.3 via deserialization of untrusted input from form entry metadata. This is due to the html-admin-page-entries-view.php file calling PHP's native unserialize on stored entry meta...

Yii 2 < 2.0.38 - Remote Code Execution

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. id: CVE-2020-15148 info: name: Yii 2 2.0.38 - Remote Code Execution author: pikpikcu severity: critical description: Yii 2 yiisoft/yii2 before version 2.0....