End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfiltered deserialization → RCE) on Log4j 2.26.1 / JDK 17.
-
Updated
Aug 26, 2026 - Java
#
cwe-502
Here are 10 public repositories matching this topic...
Interactive Jupyter demo of Prisma AIRS detecting pickle deserialization attacks (CWE-502) in ML models. Educational security demonstration with ROI analysis.
python jupyter-notebook ai-security cwe-502 security-demo ml-security pickle-vulnerability prisma-airs
-
Updated
Aug 17, 2026 - Jupyter Notebook
Type-stub security gates for pickle-backed deserialization APIs
-
Updated
May 2, 2026 - Python
PoC for CVE-2026-124079 — unauthenticated RCE in rConfig Core <=8.2.18 / Pro <8.4.1 via Redis-backed Laravel Horizon queue poisoning (CWE-502). Includes a differential environment (8.2.17 vulnerable / 8.2.18 partially patched / 8.2.19 fixed) and the full exploit chain.
redis php laravel exploit deserialization poc vulnerability horizon cve rconfig security-research laravel-horizon remote-code-execution podman cwe-502 unauthenticated-rce cve-2026-124079
-
Updated
Nov 11, 2026 - Python
A zero-config Python AST linter that flags unsafe loading of an ML model/artifact (torch.load without weights_only, pickle/joblib/dill.load, np.load allow_pickle, keras load_model, yaml.load) - arbitrary code execution (CWE-502), the model-supply-chain RCE class. Points you at weights_only=True / safetensors.
-
Updated
Aug 12, 2026 - Python
Zero-config cross-language static gate for insecure deserialization (CWE-502): flags attacker-controlled data reaching pickle.loads, PHP unserialize, Ruby Marshal.load, .NET BinaryFormatter, Java ObjectInputStream.readObject. Source-aware with safe-marker short-circuit. Single Go binary; TG001 blocker / TG002 warning.
-
Updated
Aug 30, 2026 - Go
Scan Python repos for unsafe torch.load() and pickle deserialization (CWE-502). GitHub Action + CLI + SARIF output.
python security machine-learning static-analysis pytorch deserialization vulnerability-scanner ai-security github-action cwe-502
-
Updated
Mar 21, 2026 - Python
CVE-2026-115560: PHP session upload-progress serialize_handler mismatch → pre-auth object injection → RCE. Check/exploit/verify scripts + Docker lab + Suricata/Sigma detection rules.
php security proof-of-concept exploit deserialization poc rce vulnerability cve pre-auth object-injection cwe-502 session-upload-progress cve-2026-115560 serialize-handler
-
Updated
Oct 25, 2026 - Python
Reproduce log4j2 #4255 deserialization RCE in Docker with JDK 17, validate mitigations, and test detection controls.
-
Updated
Oct 12, 2026 - Java
Apache Airflow < 3.4.0: scheduler-side deserialization of task-controlled XCom (CVE-2026-86829) leading to code execution in the scheduler process. PoC, fixed-version control, and a triggerer classpath validation-order finding.
airflow exploit deserialization poc rce vulnerability cve apache-airflow security-research cwe-502 cve-2026-86829
-
Updated
Nov 10, 2026 - Python
Add this topic to your repo
To associate your repository with the cwe-502 topic, visit your repo's landing page and select "manage topics."