328580 matches found
react2shell-lab
React2Shell Vulnerability Lab This is a deliberately vulnerable Next.js application for testing CVE-2025-55182 and CVE-2025-66478 React Server Components RCE. ⚠️ WARNING : This application is intentionally vulnerable. Use only in isolated lab environments. Vulnerability Details CVE-2025-55182 /...
cve-2020-35717
CVE-2020–35717 zonote allows XSS via crafted note, with resultant Remote Code Execution because Node.js integration is enabled. Steps to exploit the vulnerability Download any zonote affected version Open zonote app Import xss-rce.znt in zonote via Menu Open Hover over the different links in...
cve-2025-66478
CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...
CVE-2024-29269
Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / / \ \ / /\ | | |...
pwn-hisilicon-dvr
= HiSilicon DVR hack Istvan Toth [email protected] v1.0, 2017-09-06 :source-highlighter: pygments :toc: preamble :toclevels: 5 :toc-title: Contents :imagewidth: 100% abstract This report discloses serious vulnerabilities with proof of concept PoC code of DVR/NVR devices built using the...
CVE-2026-85079 Out-of-bounds write in Zigbee Simple_Desc_req handling
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
CVE-2026-85079
The EmberZNet software (version 9.1.1 and earlier) contains an out-of-bounds write vulnerability during the handling of a Simple_Desc_req response. A malformed response from a device already joined to the network can trigger this flaw, potentially leading to remote code execution . The attacker m...
EUVD-2026-108185
In EmberZNet 9.1.1 and earlier, a malformed SimpleDescreq response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a SimpleDescreq before the attack can be...
CVE-2025-55182
CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...
CVE-2026-94502
EmberZNet version 9.1.1 and earlier are vulnerable to an out-of-bounds write flaw within the Zigbee Publish Price Matrix handling logic. A malformed Publish Price Matrix command can trigger this vulnerability, potentially resulting in remote code execution . This issue specifically impacts device...
EUVD-2026-108184
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
CVE-2026-94502 Out-of-bounds write in Zigbee Publish Price Matrix handling
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
cve-2017-12149-playground
Many critical industries banking, healthcare, and manufacturing rely on legacy middleware that was built to run specifically on JBoss 5 or 6. Because these applications are often too fragile to migrate to modern versions of WildFly the successor to JBoss, organizations choose to "air-gap" or hide...
cve-2011-2553
Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security. CVE-2011-2553 FTP...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Shellproof Find and fix PHP security exposure, starting wit...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-guard Scanner, interim-mitigation and incident-hunt...
React2Shell-CVE-2025-55182-Advanced-Scanner
CVE-2025-55182 Advanced Scanner Advanced penetration testing tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js applications 📋 Table of Contents Overview Features Installation Usage Examples Bypass Techniques Technical Details Disclaimer Contributing License 🔍 Overview...
cve-2025-55182-poc-test
CVE-2025-55182 Demonstration Lab Next.js / React RSC RCE This document provides a complete and reproducible setup for demonstrating CVE-2025-55182 Remote Code Execution RCE against a vulnerable Next.js + React Server Components environment running inside a Multipass Ubuntu VM. The exploit is...
CVE-2025-24813
CVE-2025-24813 - Apache Tomcat Remote Code Execution Exploit This is a proof-of-concept PoC exploit for CVE-2025-24813 , a vulnerability in Apache Tomcat 9.0.80–9.0.83, 10.1.0–10.1.17 that allows remote code execution RCE via session deserialization. The exploit abuses partial PUT requests and th...