Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2019-18935: Remote Code Execution via Insecure Deserialization in Telerik UI

bishopfox.com | vulnerability | #rce | #deserialization | #patching | #telerik | #cve-2019-18935

Summary

Caleb Gross details CVE-2019-18935: insecure JSON deserialization in Telerik UI for ASP.NET AJAX yields remote code execution; includes the CVE-2017-11317 upload chain and patching.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE (blog.viettelcybersecurity.com)
  2. SharePoint ToolShell – One Request PreAuth RCE Chain (blog.viettelcybersecurity.com)
  3. SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization (blog.viettelcybersecurity.com)
  4. Phân tích lỗ hổng CVE-2022-22005 Microsoft Sharepoint RCE (blog.viettelcybersecurity.com)
  5. StyleSmuggler fix: patch the Magento and Adobe Commerce RCE (aikido.dev)
  6. Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (bishopfox.com)

back