https://poc.intelseclab.com/tags/java-deserialization/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-31324-sap-netweaver-visual-composer-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-31324-sap-netweaver-visual-composer-rce/Critical severity (CVSS 10) — web · CVE-2025-31324. Status: Weaponized. Affects: SAP NetWeaver Application Server (AS) Java — Visual Composer component (VCFRAMEWORK), specifically the Metadata Uploader servlet. Tags: sap-netweaver, visual-composer, metadatauploader, unrestricted-file-upload, java-deserialization, jsp-webshell, rce, cwe-434, cwe-502, python.webCriticalsap-netweavervisual-composermetadatauploaderunrestricted-file-uploadjava-deserializationjsp-webshellrcecwe-434cwe-502pythonhttps://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27172-camel-consul-registry-deserialization/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2026-27172-camel-consul-registry-deserialization/Critical severity (CVSS 9.8) — web · CVE-2026-27172. Status: Patched. Affects: Apache Camel camel-consul component (org.apache.camel.component.consul.ConsulRegistry). Tags: apache-camel, camel-consul, consulregistry, java-deserialization, rce, cwe-502, gadget-chain, ysoserial, spring-boot.webCriticalapache-camelcamel-consulconsulregistryjava-deserializationrcecwe-502gadget-chainysoserialspring-boot