CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...

CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

CVE-2023-44487-

CVE-2023-44487- 1- Install Go. 2- Run the server on one seperate machine server.go file 3- Execute the main.go file on a separate machine. Note: main.go contains the attack code. 4. Specify the IP address of the target. 5- Define the number of requests: run main.go -requests 5000...

keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

CVE-2021-41773

CVE-2021-41773 This is a simple poc for Apache Path Traversal Vulnerability Vulnerable versions: Apache/2.4.49 Apache/2.4.50 with modcgi disabled...

CVE-2022-26134

CVE-2022-26134 PoC Confluence Server and Data Center - CVE-2022-26134 - Critical severity unauthenticated remote code execution vulnerability PoC Severity Atlassian rates the severity level of this vulnerability as critical, according to the scale published in Atlassian severity levels. All...

CVE-2025-55182-Exploit

CVE-2025-55182 – React Server Components RCE Exploit ⚠️ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...

POC_CVE-2025-14700

CVE-2025-14700 PoC for CVE-2025-14700 , a Server-Side Template Injection SSTI vulnerability in Crafty Controller = 4.6.1. This vulnerability allows authenticated users to achieve Remote Code Execution RCE by injecting malicious Jinja2 templates into the Webhook configuration. 📦 Installation Clone...

cve-2023-27163

Thank you to @beet1ehttps://github.com/b33t1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Please review https://notes.sjtu.edu.cn/s/MUUhEymt7 for indepth information about the SSRF vulnerability CVE-2023-27163. This code is...

CVE-2025-55182-Simple-Scanner

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

unrealircd3.2.8.1-local-exploit

Tested on Metasploitable 3 USAGE Ruby On Attacker's shell nc -nlvp 1111 On victim's shell ruby exploit.rb 127.0.0.1 Expected output on attacker's shell listening on any 1111 ... connect to 192.168.56.102 from UNKNOWN 192.168.56.105 48144 bobafett Python On victim's shell python3 exploit.py -ri...

CVE-2011-0762

CVE-2011-0762 Exploit C exploit for the CVE-2011-0762 vulnerability in FTP servers that allows sending a STAT command with a malicious payload to cause potential crashes or unwanted execution. Description This exploit connects to an FTP server and authenticates using a provided username and...

CVE-2024-32651-changedetection-RCE

CVE-2024-32651 changedetection 0.45.20 - Remote Code Execution RCE Server-Side Template Injection Exploit!! 1. Title Remote Code Execution via Server-Side Template Injection SSTI in Vulnerable Web Application 2. Description This exploit targets a web application vulnerable to Server-Side Template...

PoC_CVE-2025-55182

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

CVE-2023-34843

CVE-2023-34843 Disclosure traggo/server version 0.3.0 is vulnerable to directory traversal. Steps to reproduce: 1. Setup traggo/server on your endpoint/server. https://traggo.net/install/ 2. Make a GET request to the following URL. curl -X GET...

cve-2025-55182-mitigator

cve-2025-55182-mitigator Defensive scanner + mitigation guidance for CVE-2025-55182 React Server Components / Flight protocol insecure deserialization. This tool is intended to help you: identify repos that are likely vulnerable based on dependency versions quickly apply the definitive mitigation...

CVE-2019-17662-Exploit

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Usage python3 apache2-4-49.py -h python3 apache2-4-49.py --check --single example.com Reference https://www.tenable.com/blog/cve-2021-41773-path-traversal-zero-day-in-apache-http-server-exploited...

CVE-2025-55182

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 A proof-of-concept exploit demonstrating a remote code execution vulnerability in Next.js applications through prototype pollution in the React server components rendering pipeline. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only...