Tag: Deserialization
Java deserialization bug in Fastjson draws active exploits with no fix ready
Alibaba's Fastjson 1.x library carries a critical deserialization flaw that attackers are exploiting in Spring Boot applications.
SharePoint flaw CVE-2026-50522 under attack after public PoC goes live
Attackers are exploiting a critical SharePoint RCE vulnerability to steal machine keys, and patching alone won't lock them out.
Apache MINA Flaws Expose Enterprise Apps to Full Takeover
A botched merge left critical Apache MINA deserialization fixes unpublished until project maintainers caught the error and reissued versions 2.2.7…