Place for random PoCs
Gadget (SSRF) in Oracle JDBC thin driver for Java native deserialization
Requires ojdbc7.jar. FakeOracleConnection is a dump empty class that implements OracleConnection interface.
JSON deserialization RCE PoC for Flexjson (http://flexjson.sourceforge.net/)
JSON deserialization RCE PoC for Jodd (https://jodd.org/json/)