Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-2510
8.1
HIGHCVSS v3
Published
April 7, 2016
CVSS v2
6.8 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
frohoff/ysoserial
GitHubA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
GitHubA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.NVD