React2Shell-Vulnerability-Verification-Script

React2Shell Vulnerability Verification Script verifyreactvulnerability.py What is this script? This is a simple, standalone Python script created to help you quickly determine if your project is affected by the critical React2Shell vulnerability also known as CVE-2025-55182. It performs a two-lev...

CVE-2021-26084-patch-

CVE-2021-26084 patch CVE-2021-26084 patch provided by "Confluence Security Advisory - 2021-08-25" this is just a workaround for linux based servers, attlasian has provided a new fixed verssion if you don't want to upgrade just patch it ! instalation download the cve-2021-26084-update file, and ma...

CVE-2011-2523

CVE-2011-2523 usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --version show program'...

CVE-2025-55182-test

CVE-2025-55182 Test Check if your endpoint is potentially vulnerable to CVE-2025-55182. Requirements pip install requests Usage Single target $ python3 react2shell-test.py -u https://app.example.com Multiple targets from file $ python3 react2shell-test.py -l targets.txt With options $ python3...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH Script de Auditoría de Agentes AI de ServiceNow v1.1 Enero 2026 Asegura tu Futuro con IA – Herramienta de Auditoría de Nivel Empresarial con Actualizaciones 2026 Este script audita Agentes AI de ServiceNow en busca de vulnerabilidades como CVE-2025-12420, brechas de gobernanza y...

Firmware-CVE-2025-7545

Preparing to download the repository 1. Update packages: sudo apt-get update 2. If necessary, install git: sudo apt install -y git Downloading the repository, installing the vulnerable Binutils, and setting up the environment 1. Download the repository: git clone...

Samba-Exploit-CVE-2007-2447

🎬 This YouTube video 1️⃣ Scanning the target Nmap nmap -sS -sV -p 139,445 192.168.56.102 Expected result: 139/tcp open netbios-ssn Samba smbd 3.X 445/tcp open microsoft-ds Samba smbd 3.0.20-Debian 👉 Samba version: 3.0.20 This is vulnerable to CVE-2007-2447. 2️⃣ Identifying the Samba exploit...

cve-2019-11043.py

cve-2019-11043.py Python port of an ExploitDB proof-of-concept. Python Port of ExploitDB 48182 For Educational Purposes Only This project is a Python port of the ExploitDB PoC for exploit 48182. It was created for learning and research purposes. ⚠ Disclaimer The script has not been tested , so it...

Exploit-CVE-2024-23897

Exploit-CVE-2024-23897 Run the Container docker run -p 8080:8080 --name vulnerable-jenkins -d jenkins/jenkins:2.441-jdk17 Check logs docker logs Fetch docker machines IP: docker inspect vulnerable-jenkins | grep IPAddress Exploitation Code: python3 exploit.py --target http://127.0.0.1:8080 --file...

CVE-2025-61229

CVE-2025-61229 Description From the developer's blog: User-settable Before/After shell scripts run escalated, with SuperDuper's TCC Full Disk Access permissions. Since those shell scripts are referenced by the settings files for the copy or schedule, a malicious actor could modify those settings ...

cve-2023-2745

How to use Save the file as checkcve-2023-2745.py and give it execute permission: chmod +x checkcve-2023-2745.py Install the dependency once: python3 -m pip install requests Run: python3 checkcve-2023-2745.py https://example.com...

CVE-2025-11833-PoC

CVE-2025-11833 Checker python3 main.py --url http://localhost --username admin --loot This repository is for educational and research purposes only. The author does not take responsibility for any misuse. Always test PoCs in a controlled and isolated environment...

quick-fix-cve-2024-38063

quick-fix-cve-2024-38063 quick powershell script to fix cve-2024-38063 Donation if you want to support my works, you can donate me at the following monero address: 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC Or using PayPal:...

CVE-2019-19393

Rittal CMC PU III – Stored XSS PoC Application: Rittal CMC PU III Web management Devices: CMC PU III 7030.000 Software Revision: From V3.11.002 to V3.15.704 Hardware Revision: From V3.00 to V6.01 Attack type: Stored XSS Solution: Update to Software Revision V3.17.10 or later Summary: Web...

CVE-2025-24893

CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for educational purposes only. I...

POC_CVE-2025-53558

CVE-2025-53558 Disclaimer This program should only be used for authorized security testing and research purposes. Users must comply with the Cybersecurity Law and use it appropriately. The author is not responsible for any illegal attacks or other unlawful acts that occur when users use this tool...

CVE-2026-106444

A flaw was found in Handlebars. This vulnerability allows a remote attacker to execute arbitrary script code through Cross-Site Scripting XSS. When an application precompiles untrusted template text and embeds the generated output directly into an inline web script block, static content is not...

MAL-2026-17641 Malicious code in troubleshooting (npm)

troubleshooting is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js...

Malicious code in troubleshooting (npm)

troubleshooting is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install, and index.js...

Malicious code in browser-metrics-plugin.contrib (npm)

browser-metrics-plugin.contrib is a dependency-confusion package: it is described as a "Compatibility shim", uses version numbers up to 99.0.1, and its README calls it an "authorized dependency-confusion test". Each listed version has a postinstall script that runs node beacon.cjs on npm install,...