Azure Pipelines Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Pipelines allows an unauthorized attacker to execute code over a network...

Microsoft Exchange Online Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...

CVE-2023-4220-exploit

CVE-2023-4220-exploit Unrestricted file upload in the large file upload functionality at /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS versions = 1.11.24 allows unauthenticated attackers to perform stored Cross-Site Scripting attacks and achieve remote code execution by...

cve-2025-59287-exploit-poc

CVE-2025-59287 Proof-of-Concept Exploit Vulnerability Overview CVE-2025-59287 is a critical Remote Code Execution RCE vulnerability in Microsoft Windows Server Update Services WSUS. The vulnerability is caused by unsafe deserialization of AuthorizationCookie data through BinaryFormatter in the...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

CVE-2025-55182-Lab

CVE-2025-55182 – Local RCE Lab React Server Components This repository is a small local lab to understand how CVE-2025-55182 works in practice on a deliberately vulnerable React Server Components / Next.js application. It is meant for education, blue teaming and secure development awareness only...

Exploit-CVE-2025-68613

Exploit-CVE-2025-68613 Security Advisory: Critical Remote Code Execution Vulnerability in n8n CVE-2025-68613 A critical vulnerability has been identified in the n8n workflow automation tool that allows for arbitrary code execution. Authenticated users with permissions to create or edit workflows...

CVE-2025-55182

CVE-2025-55182 Exploit A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6 Usage Clone the repository git clone https://github.com/ahmedshamsddin/CVE-2025-55182 R...

CVE-2022-30525

CVE-2022-30525 A OS Command Injection Vulnerability in the CGI Program of Zyxel Executive Summary The vulnerability, first discovered on April 13, 2022, caused remote code execution in Zyxel firewall products. This important vulnerability with a CVSS score of 9.8 was blocked with the update...

CUPS-CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS A simple tool to scan systems running CUPS Common Unix Printing System for the CVE-2024-47176 vulnerability. This vulnerability can lead to remote code execution RCE through the Internet Printing Protocol IPP on port 631. Features Automated Scanning :...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — Critical RCE in n8n Severity: 🔴 Critical Impact: Remote Code Execution Affected Platform: n8n workflow automation 🧩 Overview CVE-2025-68613 is a critical security vulnerability in n8n , an open-source workflow automation platform. The issue allows an authenticated attacker to...

R2S_CVE-2025-55182

CVE-2025-55182 Scanner Vulnerability scanner for CVE-2025-55182 - Remote Code Execution in Next.js Server Actions. About CVE-2025-55182 Severity: Critical CVSS TBD Affected Versions: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impact: Remote attackers can execute...

CVE-2023-38890

CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution WriteUp CVE-2023-38890 – ExploitDB 50029...

CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...

CVE-2021-44228-log4Shell

CVE-2021-44228-log4Shell exploit Exploit Test runs ping to google.com execute any command prints OS name, version and arch collect details about the OS and User opens calculator on remote machine can execute any executable download this README.md from github Run the ExploitTest java ExploitTest...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...

CVE-2025-21298

CVE-2025-21298 content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of the function is ti...

react2shell-lab

React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. ⚠️ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...

cve-2020-35717

CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...

cve-2025-66478

CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...