CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

react2shell-interactive

React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...

CVE-2025-58180

CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in File Upload In OctoPrint version =1.11.2, an attacker with file upload access e.g., valid API key or session can craft a malicious filename that bypasses sanitization and is later executed by OctoPrint’s event system, leading to remote...

webcgi-exploits

Web CGI Exploits Here's several exploits related to different web CGIs. I wrote those exploits in last few years. How it works Web app are basicly those layers: 1. applications 2. web frameworks 3. script language engines 4. web containersservers 5. web front proxynginx etc. 4 and 5 could be the...

CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-

CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNING : This script is for educational purposes and testing in authorized environments only. Unauthorized use is prohibited and may be illegal. 📋 Description This repository contains a...

CVE-2025-33053-POC

CVE-2025-33053 - WebDAV Remote Code Execution RCE PoC & C2 Simulation ⚠️ Educational Purposes Only This project demonstrates a proof-of-concept exploiting WebDAV and .url file delivery to achieve realistic remote code execution. It includes a decoy-based executable and a controlled simulation of...

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 This repository contains a Proof of Concept PoC demonstrating a critical vulnerability in givanz Vvveb 1.0.5. The vulnerability allows an authenticated user with template editing privileges to write arbitrary PHP code to server files, leading to Remote Code Execution RCE...

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

cve-2023-34446

CVE-2023-36664: Ghostscript Remote Code Execution Vulnerability Summary CVE ID: CVE-2023-36664 Product: Ghostscript 10.01.2 Vulnerability Type: Remote Code Execution RCE Overview This vulnerability CVE-2023-36664 is an arbitrary code execution RCE vulnerability caused by Ghostscript's inadequate...

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...

CrafterCMS-CVE-2025-6384

CrafterCMS Authenticated RCE - Groovy Sandbox Bypass CVE-2025-6384 A Proof of Concept for an authenticated Remote Code Execution vulnerability in CrafterCMS. Vulnerability Summary An authenticated user with developer privileges can bypass the Groovy script sandbox in Crafter Studio to achieve...

CVE-2019-15107

Webmin Server Management Tool RCE Vulnerability CVE-2019-15107 Summary CVE-2019-15107 is a vulnerability in Webmin, a web-based system administration tool for Unix systems. In the code that changes passwords, a specific parameter is passed directly to a shell command without filtering, allowing...

exploit_cve_2025_67303

exploitcve202567303 Create PoC for CVE-2025-67303 PoC original is https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...

CVE-2025-55182-RCE-Exploit

POC for CVE-2025-55182 – Next.js 16.0.6 Remote Code Execution This repository contains a working proof-of-concept POC for CVE-2025-55182 , a critical deserialization vulnerability affecting Next.js 16.0.6. The exploit abuses $@ chunk deserialization and Chunk.prototype.then to gain full control...

Blackash-CVE-2025-14558

🚨 CVE-2025-14558 : Critical Remote Code Execution in FreeBSD IPv6 🧠 Overview CVE-2025-14558 is a critical Remote Code Execution RCE vulnerability affecting FreeBSD systems that use IPv6 router solicitation services. A flaw in how untrusted network input is handled allows attackers to execute...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-

CVE-2025-49132 Pterodactyl Panel - Unauthenticated Remote Code Execution RCE 🔎 Summary CVE‑2025‑49132 is a critical Remote Code Execution vulnerability affecting Pterodactyl Panel --cmd "" --path Examples python3 CVE-2025-49132-dbs.py --target victim.com --cmd "whoami" python3 CVE-2025-49132-dbs....

CVE-2019-18935

CVE-2019-18935 Exploit Remote Code Execution exploit for Telerik UI ASP.NET AJAX through deserialization vulnerability. How to Run Step 1: Clone the Project git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Step 2: In CVE-2019-18935.py, modify line 15: version =...