PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2013-2165] When EL Injection meets Java Deserialization

blog.viettelcybersecurity.com | vulnerability | CVE-2013-2165 | #rce | #zero-day | #java | #deserialization | #exploit-development | #el-injection | #cve-2018-12532 | #richfaces
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Exploit development for RichFaces 4 CVE-2018-12532, chaining EL injection into Java deserialization and bypassing library restrictions to achieve reliable RCE on JSF applications.
CVE
CVE-2013-2165
Published
Collected

Related coverage

vulnerability · blog.viettelcybersecurity.com
CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability
Viettel researchers analyze CVE-2022-22947, a Spring Cloud Gateway 0-day where exposed actuator endpoints permit adding SpEL-filter routes, leading to RCE via EL injection.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
Critical · vulnerability · github.com
Log4j FilteredObjectInputStream Bypass: Pre-auth RCE via MarshalledObject
This PoC demonstrates an unexpected filter-bypass gadget in Log4j 2, emphasizing the danger of unauthenticated serialized object ingestion.
vulnerability · hacktron.ai
Pre-Auth RCE in OpenAM via jato.clientSession (CVE-2026-33439)
Hacktron AI discovers a critical pre-authentication RCE in OpenAM through a forgotten deserialization parameter that the original CVE-2021-35464 fix missed.
vulnerability · 0xpat.github.io
Vulnerability discovery in Java applications
Finding bugs in OWASP WebGoat: decompiling the Java/Spring app, automating account creation in Python, spotting SQL-injection anti-patterns by regex, and building exploits—from a Ya!vaConf talk.
vulnerability · blog.viettelcybersecurity.com
CVE-2026-33112: SharePoint XmlValidator Bypass Enables Low-Privilege RCE
CVE-2026-33112: a network-imported XSD schema bypasses SharePoint's XmlValidator, and the PerformancePoint PPSAuthoringService revives ExcelDataSet deserialization for low-privilege RCE.
Back