CVE-2024-29847

CVE-2024-29847 إثبات المفهوم لثغرة تنفيذ التعليمات البرمجية عن بُعد عبر إلغاء تسلسل البيانات غير الموثوقة في Ivanti Endpoint Manager AgentPortal CVE-2024-29847 يمكن العثور على تحليل السبب الجذري للثغرة على مدونتي: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ الاستخدا...

cve-2020-8165-demo

CVE-2020-8165 Demo Yet another demo of CVE-2020-8165, though in a more realistic implementation than most. Hintergrund CVE-2020-8165 Eine Schwachstelle durch Deserialisierung nicht vertrauenswürdiger Daten besteht in rails 5.2.4.3, rails 6.0.3.1, die es einem Angreifer ermöglichen kann,...

CVE-2024-24590

CVE-2024-24590 La deserializzazione di dati non fidati può verificarsi nelle versioni da 0.17.0 a 1.14.2 dell'SDK client della piattaforma ClearML di Allegro AI, consentendo a un artefatto caricato malevolmente di eseguire codice arbitrario sul sistema di un utente finale quando viene interagito...

Adobe ColdFusion - Deserialization of Untrusted Data

Adobe ColdFusion versions 2018u17 and earlier, 2021u7 and earlier and 2023u1 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-38203 info: name:...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2026-58025

CVE-2026-58025 — RCE di deserializzazione PHP in MediaWiki tramite importazione di voci di log WikiImporter → LogEntryBase::extractParams → unserialize logparams controllati dall'utente → RCE Panoramica CVE-2026-58025 è una vulnerabilità critica CVSS 9.8 di deserializzazione di dati non attendibi...

CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer Modell – Sicherheitslücke durch Deserialisierung nicht vertrauenswürdiger Daten mit Remote-Codeausführung Allgemeiner Überblick und Auswirkungen der Sicherheitslücke: Die Sicherheitslücke ermöglicht es einem Angreifer, beliebigen Code auf dem...

CVE-2026-82222 WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1...

EUVD-2026-67682

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1...

CVE-2026-45659

CVE-2026-45659 Deserialisierung nicht vertrauenswürdiger Daten in Microsoft Office SharePoint ermöglicht einem autorisierten Angreifer die Codeausführung über ein Netzwerk. ⚡ Einfache Nutzung Verwenden Sie dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokale virtuelle Maschinen...

CVE-2020-35488

Ho trovato una vulnerabilità nel prodotto: nxlog-ce2.10.2150. Ho testato la mia PoC solo su Linux Debian 10 e Windows Windows Server 2016. 1 Descrizione : Ambito : NXLOG Community Edition 2.10.2150 Tipo di bug : CWE-502, Deserializzazione di dati non attendibili...

CVE-2026-78032

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...

CVE-2021-25641-Proof-of-Concept

The 0xDABB of Doom - CVE-2021-25641-Prova di concetto Apache/Alibaba Dubbo = 2.7.3 codice PoC per CVE-2021-25641 RCE tramite deserializzazione di dati non attendibili; colpisce le versioni = 2.7.6 con gadget differenti Trattato in dettaglio nell'articolo "The 0xDABB of Doom", pubblicato sul blog...

EUVD-2026-67579

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...

CVE-2026-78032

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...

CVE-2026-78032

SOY CMS is affected by a deserialization of untrusted data vulnerability that allows an attacker to execute arbitrary code with web server privileges . The vulnerability is rated CRITICAL with a CVSS 3.0 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS 4.0 base score of 9.3 . No...

CVE-2020-7961-payloads

CVE-2020-7961-payloads Deserializzazione di dati non fidati in Liferay Portal precedente alla versione 7.2.1 CE GA2 consente a un attaccante remoto di eseguire codice arbitrario tramite JSON web services JSONWS Step 1 Scrivi il tuo payload in LifExp.java Step 2 Compilalo con javac Step 3 Crea il...

PT-2026-83084

Name of the Vulnerable Software and Affected Versions GiveWP versions prior to 4.16.7.2 Description An unauthenticated PHP object injection flaw exists due to the deserialization of untrusted data. This allows a remote attacker to execute arbitrary code on the affected system. Recommendations...

CVE-2025-53690

CVE-2025-53690 Vulnerabilità di deserializzazione di dati non attendibili in Sitecore Experience Manager XM e Sitecore Experience Platform XP consente l'inserimento di codice. Questo problema interessa Experience Manager XM: fino alla 9.0; Experience Platform XP: fino alla 9.0. Come funziona ques...

CVE-2024-24926

CVE-2024-24926 La vulnerabilità CVE-2024-24926 colpisce il tema Brooklyn di WordPress Descrizione: La vulnerabilità CVE-2024-24926 colpisce il tema Brooklyn di WordPress versioni fino alla 4.9.7.6 ed è legata alla deserializzazione di dati non attendibili CWE-502. Ciò consente a un attaccante di...