React2shell-Research

React2shell-Research Analizar y reproducir CVE-2025-55182...

next-cve-2025-66478

NextJS CVE-2025-66478 Scans all projects vulnerable to CVE-2025-66478 projects in the current working directory and reports them. Learn more about CVE-2025-66478 Warning This script doesn't fix any vulnerabilities. This is just for locating them. Please refer to this article to learn more about t...

PoC-for-CVE-2025-46359

PoC-for-CVE-2025-46359 PoC CVE-2025-46359...

CVE-2025-32463

This repository does not have a README...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...

CVE-2025-5349-Scanner

CVE-2025-5349 漏洞扫描器 用法 root@kitploit: python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...

react2shell-scanner

react2shell-scanner Una herramienta de línea de comandos para detectar CVE-2025-55182 y CVE-2025-66478 en aplicaciones Next.js que utilizan React Server Components. Para conocer los detalles técnicos de la vulnerabilidad y la metodología de detección, consulta nuestra entrada del blog:...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

CVE-2025-49132

CVE-2025-49132 独立漏洞扫描器 非Docker实现 该扫描器直接运行于Python，无需Docker依赖，适用于没有Docker或更倾向不使用Docker的环境。 安装 root@kitploit: pip install -r requirements-standalone.txt 手动安装： root@kitploit: pip install requests urllib3 用法 1. 单一目标扫描 root@kitploit: python standalonescanner.py scan http://localhost/ 2. 从文件进行批量扫描...

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub CVE-2025-24813的vulhub环境的POC脚本 因为有很多小伙伴对该漏洞的利用感觉到疑惑，所以写了这个脚本，帮助大家进行在vulhub中的漏洞利用。 详情查看：vulhub/tomcat/CVE-2025-24813...

CVE-Arsenal-Lab

TomcatScanner Advanced Detection and Exploitation Tool for CVE-2025-24813 TomcatScanner is a comprehensive security tool designed for detecting and exploiting the CVE-2025-24813 vulnerability in Apache Tomcat servers. This vulnerability involves a path equivalence issue in the 'file.Name' paramet...

POC-CVE-2025-5777

Este repositorio no tiene un README...

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813

Apache-Tomcat-Vulnerability-POC-CVE-2025-24813 Apache Tomcat 漏洞 POC CVE-2025-24813...

chronomaly

Chronomaly Chronomaly es un exploit del kernel para el kernel de Android / Linux usando CVE-2025-38352. El exploit fue escrito específicamente para el kernel de Linux v5.10.157, pero debería funcionar contra todos los kernels vulnerables v5.10.x, ya que no requiere ningún offset específico del...

PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

Exploit de desbordamiento de búfer en pila para el autopiloto de UAV militar PX4 =1.12.3 CVE-2025-5640 Autor: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Fecha: 2025-06-21 Probado en: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Tipo: Denegación de...

Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813-

Apache-Tomcat---Ejecución-Remota-de-Código-mediante-Deserialización-de-Sesión-CVE-2025-24813-...

day01-sessionreaper-lab

Day 1 — SessionReaper-style Vulnerable Lab Educational This is a tiny lab that simulates the core idea reported for CVE-2025-54236 “SessionReaper”: improper validation of nested JSON leading to dangerous code paths. This is not Magento/Adobe Commerce; it's a minimal educational replica to practic...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

Next.js RSC RCE Scanner and POC/Exploit Collection CVE-2025-66478 A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. This Scanner do not exploit the vulnerability Vulnerability Description...