magento-upload-auto-submit-zoneh

magento-upload-auto-submit-zoneh CVE-2025-54236 ⚠️ DISCLAIMER ⚠️ CRITICAL WARNING! This tool was created exclusively for: ✅ Educational purposes and security research ✅ Authorized penetration testing ✅ Security assessments on systems you own ✅ Vulnerability verification with written permission...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This is a Capture The Flag CTF styled Proof of Concept for the Next.js Middleware Authorization Bypass vulnerability CVE-2025-29927. The goal is to bypass the auth middleware and retrieve the flag from the /protected route. Vulnerabilit...

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

aisecplus-week01-danielossai

🔐 AISec Plus — Week 1: Map the Threat Researcher: Daniel Ossai Repo: aisecplus-week01-danielossai Submitted: Week 1 · AISec Plus Bootcamp 📌 Incident Name & Date EchoLeak CVE-2025-32711 Discovered: January 2025 · Disclosed: June 2025 · Patched: June 2025 📝 What Happened Researchers at Aim Security...

erl_mouse

erlmouse version 1.1 Alright, I've improved several things to increase chances of finding a vulnerable device or network. Most are not public facing, have been patched, or are so oscure that it can be difficult to find a target. Nevertheless, we persist. You can now scan every IP address in china...

erl_mouse

erlmouse 版本 1.1 好吧，我改进了几项内容以提高发现易受攻击设备或网络的机会。大多数设备并非面向公众，已打过补丁，或过于晦涩难找目标。 尽管如此，我们仍在坚持。现在你可以通过选择“Type Presets”（类型预设），然后选择一次要扫描的IP块数量，来扫描中国的每一个IP地址。这里有超过3亿个IP地址，所以悠着点。哈哈。 还有其他更量身定制的类别可供选择，你可能有更好的机会。RabbitMQ 和 CouchDB 的 IP 块通常使用有漏洞的 SSH 服务。好吧，祝你好运，ERL MOUSE v1.1 python 脚本，用于寻找 CVE-2025-32433 的易受攻击目标...

CVE-2025-31324

CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...

CVE-2025-24813

Este repositorio no tiene un README...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 He creado un exploit simple en Python para react2shell CVE-2025-55182 USO 1. Guarda el script: Guarda el código anterior como exploit.py. 2. Actualiza los hosts: Asegúrate de que reactor.htb se resuelva a la IP objetivo en tu archivo /etc/hosts. echo " reactor.ht...

CVE-2025-47981

🔵 CVE-2025-47981 — Windows SPNEGO NEGOEX Vulnerability Assessment Script Type: Vulnerability Assessment — Detection / Compliance Check CVE: CVE-2025-47981 CVSS: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE: CWE-122 — Heap-based Buffer Overflow Alias: "SPNEGO Nightmare" / "Windows...

ROOT-APP-MAVEN-CVE-2025-41254 CVE-2025-41254 in org.springframework:spring-websocket - Patched by Root

Root has patched CVE-2025-41254 in the org.springframework:spring-websocket package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-41234 CVE-2025-41234 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2025-41234 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

CVE-2025-58434-PoC

CVE-2025-58434 PoC Python proof-of-concept script for triggering POST /api/v1/account/forgot-password. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Credit zaddy6 Isaac David arthurgervais...

CVE-2025

CVE-2025 CVEs discovered in 2025 and their PoCs...

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 POC and lab setup Create the server from scratch root@kitploit: npm create [email protected] react2shell-lab Accept defaults is fine, name it whatever OR Clone the repo root@kitploit: git clone https://github.com/timsonner/React2Shell-CVE-2025-55182.git AND Install...

AEMPWN

AEMPWN AEM Forms Scanner for CVE-2025-54253 & CVE-2025-54254 AEMPWN is a targeted scanner for identifying high-risk Adobe Experience Manager AEM Forms vulnerabilities, with support for safe detection, blind out-of-band OOB confirmation, and full proof-of-concept PoC validation workflows. This too...

CVE-2025-55182

CVE-2025-55182 – Ejecución Remota de Código en React Server Components Creado por : Virendra Kumar Empresa : Cyber Leelawat Sitio web :...

React-2-Shell

Esta es una herramienta de explotación de seguridad dirigida a CVE-2025-55182. Explota una vulnerabilidad de ejecución remota de código RCE en React Server Components. 🔥 Antecedentes de CVE-2025-55182 CVE-2025-55182 también conocido ampliamente como “React2Shell” es una vulnerabilidad crítica de...

cve-2025-10725-eda-demo

This repository does not have a README...

react2shell-exploit

CVE-2025-55182 – React2Shell Remote Code Execution in Next.js ⚠️ Disclaimer : This documentation is provided for educational and security research purposes only. Any unauthorized use of these techniques against systems you do not own or have explicit permission to test is illegal. 📋 Table of...