YAML Load Executes Arbitrary Code Compromising 470 Servers?!
YAML RCE APOCALYPSE! yaml.load() executes Python! Attacker uploads malicious config! Backdoor on all servers! 4.7M database exfiltrated! $47M breach! CISO ARRESTED!
#python #pythondisaster #yaml #remotecodeexecution #configloading #productionbug #pythonshorts #pythonwtf #deserialization #careerending #criminalcharges #pyyaml
Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed FileTransfer vulnerability - https://www.redpacketsecurity.com/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-filetransfer-vulnerability/
#threatintel
#CVE-2025-10035
#GoAnywhere MFT
#Deserialization vulnerability
#Storm-1175
#Medusa ransomware
Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed FileTransfer vulnerability - https://www.redpacketsecurity.com/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-filetransfer-vulnerability/
#threatintel
#CVE-2025-10035
#GoAnywhere MFT
#Deserialization vulnerability
#Storm-1175
#Medusa ransomware
High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478):
#exploit #exploitation #infosec #informationsecurity #cve #rce #hacking #deserialization
This morning, an advisory was released for Next.js about a vulnerability that leads to RCE in default configurations, with no prerequisites. The root cause of this issue lies in React Server Components, which Next.js utilizes. Over the last day, we have noticed an incredible amount of incorrect PoCs floating around on GitHub that do not
High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478):
#exploit #exploitation #infosec #informationsecurity #cve #rce #hacking #deserialization
This morning, an advisory was released for Next.js about a vulnerability that leads to RCE in default configurations, with no prerequisites. The root cause of this issue lies in React Server Components, which Next.js utilizes. Over the last day, we have noticed an incredible amount of incorrect PoCs floating around on GitHub that do not
Making Serialization Gadgets by Hand - .NET:
https://www.vulncheck.com/blog/making-dotnet-gadgets
#dotnet #infosec #deserialization #hacking #programming #exploit #exploitation
Making Serialization Gadgets by Hand - .NET:
https://www.vulncheck.com/blog/making-dotnet-gadgets
#dotnet #infosec #deserialization #hacking #programming #exploit #exploitation
CVE-2025-59287 WSUS Unauthenticated RCE
Vulnerability in update service enables unauthenticated attacker to send crafted encrypted cookie leading to unsafe deserialization and SYSTEM-level code execution
Why nested deserialization is STILL harmful – Magento RCE (CVE-2025-54236):
#infosec #cybersecurity #deserialization #rce #exploit #exploitation #cve
Python Peak
PSConfEU
RedPacket Security
Alexandre Borges
Alexandre Borges
kriware 
