References https://www.sentinelone.com/vulnerability-database/cve-2022-44670/ https://zone.ci/aliyun/ali_nvd/42549.html https://cve.imfht.com/detail/CVE-2022-35745?lang=en https://nvd.nist.gov/vuln/detail/CVE-2022-35752 https://www.cve.org/CVERecord?id=CVE-2022-35753 https://msrc.microsoft.com/update-guide/en-US/security-guidance/advisory/CVE-2022-35767 https://nvd.nist.gov/vuln/detail/cve-2023-21548 https://www.clouddefense.ai/cve/2023/CVE-2023-24903 https://www.sentinelone.com/vulnerability-database/cve-2023-21548/ https://www.huorong.cn/document/tech/leak_report/957.html https://www.secpod.com/blog/microsoft-august-2022-patch-tuesday-addresses-121-security-flaws-and-2-zero-day/ https://cve.imfht.com/detail/CVE-2023-21535?lang=en
Related VulnerabilitiesPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞(CVE-2025-53770)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)Microsoft SharePoint Server JWT 权限绕过漏洞(CVE-2026-55040)英華達|全家寶 Cloud - Insecure Direct Object ReferenceJava Debug Wire Protocol 代码执行漏洞PoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure DeserializationFUXA /socket.io 服务器端请求伪造漏洞(CVE-2026-47719)沛盛資訊|OMICARD EDM - Insecure Direct Object Reference金財通商務科技|Service Center - Insecure Direct Object ReferenceSecurePoint UTM /spcgi.cgi 信息泄露漏洞(CVE-2023-22620)