CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights.
☆25Dec 13, 2020Updated 5 years ago
Alternatives and similar repositories for CVE-2020-26259
Users that are interested in CVE-2020-26259 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆70Dec 14, 2020Updated 5 years ago
- ☆16Jul 20, 2020Updated 6 years ago
- WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar☆79Jan 27, 2021Updated 5 years ago
- Inspur vul repo☆34Feb 23, 2021Updated 5 years ago
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆214May 19, 2020Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE☆47Oct 23, 2021Updated 5 years ago
- Run Swing based GUI application within the Docker container through the Jetbrains Projector, and access it from browsers.☆18Apr 10, 2021Updated 5 years ago
- PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)☆82Jan 15, 2021Updated 5 years ago
- F5 BIG-IP RCE CVE-2020-5902 automatic check tool☆62Jul 12, 2020Updated 6 years ago
- Weblogic coherence.jar RCE☆175May 10, 2020Updated 6 years ago
- OpenFire 管理后台账号密码解密☆30Dec 15, 2020Updated 5 years ago
- java.lang.Runtime.exec command encoder☆43Jun 8, 2021Updated 5 years ago
- WARNING: This is a vulnerable application to test the exploit for the Spring Break vulnerability (CVE-2017-8046). Run it at your own risk…☆14Oct 8, 2018Updated 8 years ago
- ☆36Dec 1, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。☆120Jul 11, 2019Updated 7 years ago
- Apache Solr Exploits 🌟☆343Oct 13, 2020Updated 6 years ago
- 几条关于CVE-2020-15148（yii2反序列化）的绕过☆75Sep 21, 2020Updated 6 years ago
- PoC exploit of CVE-2020-11651 and CVE-2020-11652☆123Jul 10, 2020Updated 6 years ago
- h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.☆54Dec 12, 2021Updated 4 years ago
- jasypt Decrypt Encrypt☆14Jan 7, 2022Updated 4 years ago
- jenkins payload☆17May 3, 2017Updated 9 years ago
- Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE☆177Dec 15, 2022Updated 3 years ago
- CVE-2020-17008 splWOW64 Elevation of Privilege☆46Dec 24, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SAMR修改域内主机密码☆10Feb 27, 2022Updated 4 years ago
- 技术文章☆21Feb 7, 2025Updated last year
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆169Apr 5, 2019Updated 7 years ago
- Nexus Repository Manager3 - 远程执行代码漏洞回显payload☆13Sep 29, 2020Updated 6 years ago
- Red TL;DR Database is a set of text data that provides search for red-tldr. If you don’t know red-tldr yet, please read the documentation…☆41Sep 2, 2022Updated 4 years ago
- CVE-2021-37580的poc☆38Jun 18, 2023Updated 3 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Jun 20, 2020Updated 6 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell☆529Aug 25, 2020Updated 6 years ago
- Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()☆80Jul 20, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2015-4852、CVE-2016-0638、CVE-2016-3510、CVE-2019-2890漏洞POC☆17Aug 11, 2020Updated 6 years ago
- PoC of Spring AMQP Deserialization Vulnerability (CVE-2023-34050)☆13Jan 29, 2024Updated 2 years ago
- fastjson bypass autotype 1.2.68 with Throwable and AutoCloseable.☆228Oct 12, 2022Updated 4 years ago
- CVE-2020-9547：FasterXML/jackson-databind 远程代码执行漏洞☆23Mar 2, 2020Updated 6 years ago
- Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack☆27Mar 6, 2021Updated 5 years ago
- Spring-Cloud-Spel-RCE☆12Sep 16, 2022Updated 4 years ago
- ☆83Jan 11, 2018Updated 8 years ago