CVE-2020-26259: XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights.
☆25Dec 13, 2020Updated 5 years ago
Alternatives and similar repositories for CVE-2020-26259
Users that are interested in CVE-2020-26259 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆70Dec 14, 2020Updated 5 years ago
- ☆16Jul 20, 2020Updated 6 years ago
- Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)☆10Feb 9, 2022Updated 4 years ago
- WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar☆79Jan 27, 2021Updated 5 years ago
- CVE-2020-9547：FasterXML/jackson-databind 远程代码执行漏洞☆23Mar 2, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Inspur vul repo☆34Feb 23, 2021Updated 5 years ago
- Java反序列化漏洞学习笔记☆16Nov 17, 2019Updated 6 years ago
- Godzilla v1.0 source code☆38Aug 26, 2020Updated 5 years ago
- tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…☆214May 19, 2020Updated 6 years ago
- [CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE☆18Mar 17, 2025Updated last year
- Run Swing based GUI application within the Docker container through the Jetbrains Projector, and access it from browsers.☆18Apr 10, 2021Updated 5 years ago
- SolarWinds Orion Platform ActionPluginBaseView 反序列化RCE☆47Oct 23, 2021Updated 4 years ago
- OpenFire 管理后台账号密码解密☆30Dec 15, 2020Updated 5 years ago
- Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE☆178Dec 15, 2022Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- java.lang.Runtime.exec command encoder☆42Jun 8, 2021Updated 5 years ago
- PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)☆82Jan 15, 2021Updated 5 years ago
- WARNING: This is a vulnerable application to test the exploit for the Spring Break vulnerability (CVE-2017-8046). Run it at your own risk…☆14Oct 8, 2018Updated 7 years ago
- F5 BIG-IP RCE CVE-2020-5902 automatic check tool☆62Jul 12, 2020Updated 6 years ago
- Weblogic coherence.jar RCE☆176May 10, 2020Updated 6 years ago
- ☆36Dec 1, 2020Updated 5 years ago
- This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。☆120Jul 11, 2019Updated 7 years ago
- 几条关于CVE-2020-15148（yii2反序列化）的绕过☆75Sep 21, 2020Updated 5 years ago
- Apache Solr Exploits 🌟☆346Oct 13, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- PoC exploit of CVE-2020-11651 and CVE-2020-11652☆122Jul 10, 2020Updated 6 years ago
- ☆11Mar 30, 2017Updated 9 years ago
- h2-jdbc(https://github.com/h2database/h2database/issues/3195) & mysql-jdbc(CVE-2021-2471) SQLXML XXE vulnerability reproduction.☆54Dec 12, 2021Updated 4 years ago
- jasypt Decrypt Encrypt☆14Jan 7, 2022Updated 4 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆167Apr 5, 2019Updated 7 years ago
- jenkins payload☆17May 3, 2017Updated 9 years ago
- SAMR修改域内主机密码☆10Feb 27, 2022Updated 4 years ago
- Nexus Repository Manager3 - 远程执行代码漏洞回显payload☆13Sep 29, 2020Updated 5 years ago
- CVE-2020-17008 splWOW64 Elevation of Privilege☆46Dec 24, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 致远OA利用工具☆27Jul 15, 2023Updated 3 years ago
- Tomcat基于动态注册Filter的无文件Webshell☆26Jun 20, 2020Updated 6 years ago
- 技术文章☆21Feb 7, 2025Updated last year
- Red TL;DR Database is a set of text data that provides search for red-tldr. If you don’t know red-tldr yet, please read the documentation…☆41Sep 2, 2022Updated 3 years ago
- WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell☆533Aug 25, 2020Updated 5 years ago
- CVE-2021-37580的poc☆38Jun 18, 2023Updated 3 years ago
- ☆23Feb 4, 2026Updated 5 months ago