繹宇數位科技 MailHunter Ultimate電子郵件行銷追蹤分析系統 - Deserialization of Untrusted Data

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-6365-b056c-1.html
• https://www.twcert.org.tw/newepaper/cp-151-6365-b056c-3.html
• https://zone.ci/aliyun/ali_nvd/54989.html
• https://www.twcert.org.tw/tw/lp-132-1-25-20.html
• http://zone.ci/vulns/ys/355298.html
• https://blog.hitcon.org/2023/05/cvehunter.html

Related Vulnerabilities

• PoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization
• PoCCVE-2015-7501: Red Hat JBoss - Insecure Deserialization
• PoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization
• PoCCVE-2025-26399: SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE
• PoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
• PoCCVE-2024-42323: Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code Execution
• PoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE
• PoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure Deserialization
• PoCCVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
• 技嘉｜Performance Library - Insecure Deserialization
• PoCCVE-2026-27971: Qwik - Unauthenticated RCE via server$ Deserialization
• PoCCVE-2025-49533: Adobe Experience Manager Forms - Insecure Deserialization
• PoCCVE-2017-18580: WordPress Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution