CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerablity 1. Explanation about the Vulnerablity: CVE-2025-55182 “React2Shell” is a critical Remote Code Execution RCE vulnerability inside React Server Components RSC — specifically in the React Flight protocol deserialization logic. Affects: React’s server-side...

CVE-2026-8838-RCE

CVE-2026-8838 — Amazon Redshift Python Driver: Remote Code Execution via eval ⚠️ Educational Use Only Research and demonstration project in offensive cybersecurity conducted exclusively for educational and awareness purposes. Any use on systems without explicit authorization is illegal. This...

CVE-2024-47176-Scanner

Quick Start Example usage: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 Vulnerability Scanner cups-browsed What is CUPS And Why Does It Matter? CUPS Common Unix Printing System is an open-source framework for managing and controlling printers on UNIX and...

CVE-2023-34362

CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Technical Analysis A technical root cause analysis of the vulnerability can be found on the blog: Summary This POC abuses an SQL injection to obtain a sysadmin API access token and then uses that access to abuse a deserialization cal...

exploit-CVE-2017-6090

Containerized exploitable CVE-2017-6090 This projects builds a container running PhpCollab 2.5.1, containing a remote code execution vulnerability as detailed in CVE-2017-6090. In addition, there is a docker-compse file to start that container and mysql to show the demo, and instructions to explo...

SpringCloudFunction-Research

SpringCloudFunction-Research CVE-2022-22963 research Environment vulfocus/spring-cloud-function-rce:latest Cause Parsing issue of the spring.cloud.function.routing-expression parameter in the Request Header, leading to injection Payload attacks. Reference...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

PunchingBag-for-React2Shell

🥊 PunchingBag - CVE-2025-55182 Security Research Platform ⚠️ EDUCATIONAL PURPOSE ONLY : This is an intentionally vulnerable application designed for authorized security research and CTF challenges. Do NOT use these techniques on unauthorized systems. A deliberately vulnerable Next.js 15.1.6...

CVE-2025-55182-Lab

CVE-2025-55182 – Local RCE Lab React Server Components This repository is a small local lab to understand how CVE-2025-55182 works in practice on a deliberately vulnerable React Server Components / Next.js application. It is meant for education, blue teaming and secure development awareness only...

CVE-2023-22527-POC

CVE-2023-22527: Atlassian Confluence Vulnerability Introduction The CVE-2023-22527 vulnerability is a critical security flaw in Atlassian Confluence, a widely used collaboration and documentation platform. This vulnerability exists in both Confluence Data Center and Confluence Server, which are...

OffensivePascal-CVE-2010-2075

CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...

PoC-2023-43208

CVE-2023-43208-EXPLOIT Mirth Connect Remote Code Execution RCE Exploit ⚠️ FOR EDUCATIONAL AND LAB USE ONLY ⚠️ A proof-of-concept exploit for CVE-2023-43208, a remote code execution vulnerability in Mirth Connect before version 4.4.1. 🚨 IMPORTANT LEGAL DISCLAIMER This tool is strictly for: 🧪...

PoC-CVE-2025-55182

The Script exploits CVE-2025-55182, an RCE that affects the React Server Components used in React.js and Next.js. Affected React Versions: 19.0.0 19.1.0 and 19.1.1 19.2.0 Next.js: Next.js 15.x all versions prior to fixes Next.js 16.0.0 initial alpha/beta/RC versions built on vulnerable React 19...

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVE-2025-55182-Scanner

🛡️ CVE-2025-55182 Scanner React2Shell Developed by:SainiON Hacks A standalone GUI tool to detect and demonstrate the React Server Components Remote Code Execution RCE vulnerability CVE-2025-55182 in Next.js applications. 📺 Demo & Tutorial Watch the full breakdown and tool demonstration on my...

CVE-2025-55182

🚨 NextRce — CVE-2025-55182 Next.js / React Server Components RCE NextRce is a security research tool demonstrating CVE-2025-55182 , a critical vulnerability in Next.js App Router applications using React Server Components RSC and Server Actions. This vulnerability allows an attacker to achieve...

CVE-2023-4220

CVE-2023-4220 RCE Chamilo 1.11.24 | https://starlabs.sg/advisories/23/23-4220/ | | Chamilo LMS /tmp/rce.php EOF curl -F 'bigUploadFile=@/tmp/rce.php' "$HOST/$URLUPLD" CMD=$echo $CMD|base64 -w0| python3 -c "import urllib.parse,sys; printurllib.parse.quoteplussys.stdin.read" curl...

WSO2RCE

WSO2RCE The CVE-2022-29464 affects some WSO2 products such as WSO2 API Manager and WSO2 Open Banking , allowing arbitrary file upload and remote code execution. Affected Products: WSO2 API Manager 2.2.0, up to 4.0.0 WSO2 Identity Server 5.2.0, up to 5.11.0 WSO2 Identity Server Analytics 5.4.0,...

CVE-2018-15877-RCE

CVE-2018-15877-RCE RCE via the Planview Activity Monitor plugin for wordpress. Requirements: Python3 Selenium Usage: ./exploit.py...

SSE4-CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 Getting Started 1. Run docker compose up --build to build and start the vulnerable application. 2. Run curl -H "Accept: text/html;"...