FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

cve-2023-34446

CVE-2023-36664: Ghostscript Remote Code Execution Vulnerability Summary CVE ID: CVE-2023-36664 Product: Ghostscript 10.01.2 Vulnerability Type: Remote Code Execution RCE Overview This vulnerability CVE-2023-36664 is an arbitrary code execution RCE vulnerability caused by Ghostscript's inadequate...

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...

CrafterCMS-CVE-2025-6384

CrafterCMS Authenticated RCE - Groovy Sandbox Bypass CVE-2025-6384 A Proof of Concept for an authenticated Remote Code Execution vulnerability in CrafterCMS. Vulnerability Summary An authenticated user with developer privileges can bypass the Groovy script sandbox in Crafter Studio to achieve...

CVE-2019-15107

Webmin Server Management Tool RCE Vulnerability CVE-2019-15107 Summary CVE-2019-15107 is a vulnerability in Webmin, a web-based system administration tool for Unix systems. In the code that changes passwords, a specific parameter is passed directly to a shell command without filtering, allowing...

exploit_cve_2025_67303

exploitcve202567303 Create PoC for CVE-2025-67303 PoC original is https://www.doyensec.com/resources/DoyensecAdvisoryComfyUIManagerRCEviaCustomNodeInstall.pdf...

CVE-2025-55182-RCE-Exploit

POC for CVE-2025-55182 – Next.js 16.0.6 Remote Code Execution This repository contains a working proof-of-concept POC for CVE-2025-55182 , a critical deserialization vulnerability affecting Next.js 16.0.6. The exploit abuses $@ chunk deserialization and Chunk.prototype.then to gain full control...

Blackash-CVE-2025-14558

🚨 CVE-2025-14558 : Critical Remote Code Execution in FreeBSD IPv6 🧠 Overview CVE-2025-14558 is a critical Remote Code Execution RCE vulnerability affecting FreeBSD systems that use IPv6 router solicitation services. A flaw in how untrusted network input is handled allows attackers to execute...

Apache-CVE-2021-42013-RCE-Exploit

🚀 Overview This exploit tool targets path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. The tool uses curl backend to bypass URL encoding issues that affect other Python-based exploit attempts, providing reliable exploitation even when other...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2025-49132-Pterodactyl-Panel-Unauthenticated-Remote-Code-Execution-RCE-

CVE-2025-49132 Pterodactyl Panel - Unauthenticated Remote Code Execution RCE 🔎 Summary CVE‑2025‑49132 is a critical Remote Code Execution vulnerability affecting Pterodactyl Panel --cmd "" --path Examples python3 CVE-2025-49132-dbs.py --target victim.com --cmd "whoami" python3 CVE-2025-49132-dbs....

CVE-2019-18935

CVE-2019-18935 Exploit Remote Code Execution exploit for Telerik UI ASP.NET AJAX through deserialization vulnerability. How to Run Step 1: Clone the Project git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Step 2: In CVE-2019-18935.py, modify line 15: version =...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

CVE-2025-25257

CVE-2025-25257 FortiWeb CVE-2025-25257 exploit https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce exp.py: working/full exploit. signed.py: just a PoC of file read/write. initial version of the exploit...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Translate Module Remote Code Execution Vulnerability...

CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...

CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600 Drupal RCE Credits to: File| Drupal Ver| Source| Comment ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py| 8|...