codewhitesec

3 exploits Active since Apr 2017
CVE-2017-3066 NOMISEC CRITICAL WORKING POC
Adobe Coldfusion - Insecure Deserialization
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.
96 stars
CVSS 9.8
CVE-2024-29059 NOMISEC HIGH WORKING POC
.NET Framework - Leaking ObjRefs via HTTP .NET Remoting
.NET Framework Information Disclosure Vulnerability
92 stars
CVSS 7.5
CVE-2018-0824 NOMISEC HIGH WORKING POC
Microsoft Windows - Remote Code Execution via Untrusted Object Deserialization
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
88 stars
CVSS 8.8