Tag: deserialization

Attack reports, vulnerabilities, indicators and intrusion sets linked to deserialization.

Attack reports (7)

• React2Shell flaw (CVE-2025-55182) exploited for remote code execution · Published 12/12/2025 10:09 · Modified 21/12/2025 19:01
• Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability · Published 11/12/2025 18:25 · Modified 21/12/2025 19:01
• React2Shell Deep Dive: CVE-2025-55182 Exploit Mechanics · Published 09/12/2025 17:08 · Modified 21/12/2025 18:51
• August Vulnerabilities of Note · Published 15/09/2025 18:00 · Modified 15/09/2025 22:09
• ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690) · Published 04/09/2025 17:54 · Modified 04/09/2025 21:45
• SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know · Published 21/07/2025 22:45 · Modified 22/07/2025 09:30
• CVE-2025-53770 and CVE-2025-53771: Actively Exploited SharePoint Vulnerabilities · Published 22/07/2025 09:04 · Modified 22/07/2025 09:29