Insecure-Deserialization — PoC Archivehttps://poc.intelseclab.com/tags/insecure-deserialization/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000MLflow / MLServer Insecure Pickle Deserialization RCE — CVE-2026-0596https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0596-mlflow-mlserver-pickle-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0596-mlflow-mlserver-pickle-rce/Critical severity (CVSS 9.6) — web · CVE-2026-0596 (GHSA-rvhj-8chj-8v3c). Status: PoC. Affects: MLflow model serving stack (mlflow==2.11.1, mlserver==1.3.5, mlserver-mlflow==1.3.5). Tags: mlflow, mlserver, pickle, insecure-deserialization, rce, machine-learning, cwe-502, docker.webCriticalmlflowmlserverpickleinsecure-deserializationrcemachine-learningcwe-502dockerUnauthenticated RCE in Mirasvit Full Page Cache Warmer for Magento 2 (CVE-2026-45247)https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-45247-mirasvit-magento-cache-warmer-rce/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-01_cve-2026-45247-mirasvit-magento-cache-warmer-rce/Critical severity (CVSS 9.3) — web · CVE-2026-45247. Status: Weaponized. Affects: Mirasvit Full Page Cache Warmer extension for Magento 2. Tags: php-object-injection, insecure-deserialization, RCE, Magento, Mirasvit, e-commerce, cookie-based, unauthenticated, CISA-KEV, active-exploitation.webCriticalphp-object-injectioninsecure-deserializationRCEMagentoMirasvite-commercecookie-basedunauthenticatedCISA-KEVactive-exploitation