CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - Detect Vulnerabilities with Ease Download CVE-2025-55182-scanner 🚀 Getting Started Welcome! This guide will help you download and run the CVE-2025-55182-scanner. This tool identifies exposed React Server Components endpoints in your applications without being intrusive....

cups-script-final-project

What it does Two-stage detection tool for CVE-2025-58060, authentication bypass vulnerability in the Common UNIX Printing System CUPS. Rather than relying on version numbers alone, the tool combines a banner-based version check with an active auth bypass probe. This helps confirming real...

CVE-2025-5548-Exploit-Development

CVE-2025-5548 - Exploit Development Lab This repository documents the process of setting up a working environment for vulnerability analysis and exploit development, and applying it to a practical buffer overflow case study. The project is built around FreeFloat FTP Server 1.0, used as an...

CVE-2025-14765-and-CVE-2025-14766

Chrome 漏洞交互式实验室 概述 本交互式教育实验室在安全、可控的环境中模拟了两个关键的 Chrome 漏洞（CVE-2025-14765 和 CVE-2025-14766）。该工具可视化内存损坏概念，无需执行实际漏洞利用，非常适合安全培训和漏洞意识教育。 交互式安全研究平台，展示 Chrome 浏览器版本 143.0.7499.147 中的真实漏洞 功能特性 交互式内存可视化：实时查看内存状态变化 逐步漏洞模拟：跟随从分配到利用的攻击链 载荷构建接口：创建并解析自定义载荷 教育导向：安全环境中学习内存损坏漏洞 全面日志记录：记录每一步操作并提供详细解释 前提条件...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

r2s

React2Shell R2S - CVE-2025-55182 Testing Tool Advanced exploitation testing tool for CVE-2025-55182 vulnerability assessment Features • Installation • Usage • Testing Environment • Legal 📖 What is R2S? R2S React2Shell is a security testing tool designed to help security researchers, developers, a...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ 高级 MongoDB 内存泄漏利用工具 保持学习 | 保持黑客精神 - Alexcyberx 🔥 关于 MongoBleed-Pro 是一款针对 CVE-2025-14847 的高级利用工具，该漏洞是 MongoDB 在 zlib 压缩处理中存在的严重内存泄露漏洞。该工具允许安全研究人员从存在漏洞的 MongoDB 实例中提取敏感数据。 ⚠️ 免责声明 本工具仅供 授权的安全测试和教育目的 使用。未经授权访问计算机系统属于违法行为。在测试前请务必获得适当授权。 💀 漏洞详情 属性| 详情 ---|--- CVE ID| CVE-2025-14847...

CVE-2025-26794-Exim-Mail-SQLi

This repository does not have a README...

CVE-2025-49144-PoC

CVE-2025-49144 I write a blog about this vulnerability here: https://havertz2110.github.io/posts/cve-reproduce-cve-2025-49144-notepad++/...

htb-facts

HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...

React-Security-CVE-2025-55182-Exploit

⚛️ React2Shell Exploit CVE-2025-55182 A lightweight, automated Proof of Concept PoC and bulk scanner for the Critical RCE vulnerability in React Server Components React 19 / Next.js. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY. This tool is designed to help security...

django-connector-CVE-2025-64459-testbed

Django-CVE-2025-64459-Testbed A self-contained testbed for Django CVE-2025-64459. Demonstrates QuerySet.filter parameter injection via dictionary expansion using Docker. About the Vulnerability CVE-2025-64459 is a high-severity vulnerability in Django specifically versions 5.1.14 that allows...

REACT-CVE-2025-55182-Lab

React-2025 CTF Lab: CVE-2025-55182 Overview This repository contains a Capture The Flag CTF lab designed strictly for educational use and security research. The environment features a vulnerable Next.js 16 e-commerce mock storefront "Quantum Supplies" specifically built to demonstrate and practic...

CVE-2025-55182-Researching-process

CVE-2025-55182 Research Repository Ethical Disclaimer This repository is dedicated to defensive cybersecurity research and educational purposes only. All content is focused on: Understanding vulnerabilities for defensive purposes Developing detection mechanisms Implementing mitigation strategies...

HTB-Facts-Writeup

HackTheBox — Facts Machine Writeup Machine Info Field| Details ---|--- Name| Facts OS| Linux Difficulty| Easy Release| Season 10 Retired| No Attack Chain Overview root@kitploit: Recon → Web Enumeration → CVE-2025-2304 Mass Assignment → S3/MinIO Credential Leak → SSH Key Extraction → Passphrase...

CVE_2025_68413-4

CVE202568413-4 Disclosure and PoCs for CVE-2025-68413 and CVE-2025-68414...

Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection

CVE-2025-25257 Detection Engineering Repository Overview This repository provides production-ready detection engineering content for CVE-2025-25257 , a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead...

CVE-2025-24054-24071---Metasploit-Module

CVE-2025-24054/24071 - Metasploit Module Overview The vulnerability occurs during the extraction process of a .zip file. When interacting with a specially crafted .library-ms file, Windows Explorer processes the internal XML schema and automatically initiates an SMB authentication request to a...

CVE-2025-6934

CVE-2025-6934 Auto Exploit ⚡ Overview CVE-2025-6934 is a proof-of-concept PoC exploit targeting WordPress Plugin: Opal Estate Pro ≤ 1.7.5. This exploit demonstrates unauthenticated administrator account creation. Disclaimer: This PoC is for educational purposes only. Do not use on systems without...