CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. 📖 Overview Property| Value ---|--- CVE ID| CVE-2026-53921 Severity| 🔴 Critical CVSS v3.1| 9.8 CWE...

next.js-scanner

next.js-scanner Detection scanner for CVE-2025-55182 React Server Component Remote Code Execution Vulnerability...

Solar-exploiting-log-4j

🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...

CVE-2024-6387-analysis

CVE-2024-6387 OpenSSH Signal Race Condition Vulnerability Analysis Vulnerability Overview CVE-2024-6387 is a signal handling race condition vulnerability in OpenSSH versions 8.5p1 through 9.7p1, known as "regreSSHion". An attacker can continuously attempt within 6-8 hours to execute arbitrary cod...

CVE-2026-82222

CVE-2026-82222 — GiveWP Author: Rx019 CVSS: 10.0 Critical Type: Unauthenticated PHP Object Injection → Remote Code Execution Plugin: GiveWP give — Donation Plugin and Fundraising Platform Affected: Patched: 4.16.8 Description GiveWP stores a donor's lastname in the PHP session without sanitizatio...

cve-2025-20333

CVE-2025-20333 - Complete Research & Exploitation Toolkit Overview This directory contains comprehensive research, analysis, and proof-of-concept code for CVE-2025-20333 , a critical stack buffer overflow vulnerability in Cisco ASA/FTD WebVPN servers. Status: ⚠️ Actively exploited in the wild...

CVE-2025-55182-React-RSC-Exploit

CVE-2025-55182 // REACT SERVER COMPONENTS RCE OVERVIEW Exploit PoC for CVE-2025-55182. Targets unsafe versions and input validation functions vulnerabilities in React Server Components. TECHNICAL MECHANISM Vector : Prototype pollution via $1:proto :then during hydration. Payload : RCE via...

CVE-2025-55182-MassPayloadAttack

CVE-2025-55182 Mass Payload Attack React2Shell A modified Mass RCE Exploit script for CVE-2025-55182 React2Shell targeting Next.js applications. This tool is a modification of the original PoC script by pax-k. While the original script targets a single host, this version is enhanced to support ma...

log4shell-poc

CVE-2021-44228 Log4Shell POC Overview Proof of Concept for Remote Code Execution via JNDI Injection vulnerability in Apache Log4j 2.14.1. Web Hacking Course - Week 11 Assignment. Environment Role| Software| Version ---|---|--- Victim Server| Spring Boot + Log4j| 2.6.1 + 2.14.1 Victim JDK| OpenJDK...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

Samba-CVE-2007-2447-Exploit-Username-Map-Script

Samba CVE-2007-2447 Exploit Username Map Script This repository contains a Python script designed to automate the exploitation of the CVE-2007-2447 vulnerability on Samba servers versions 3.0.20 to 3.0.25rc3. This tool has been developed for strictly educational purposes and authorized penetratio...

CVE-2024-39700-PoC

CVE-2024-39700 Proof of Concept Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Action Result:...

CVE-2025-56819

CVE-2025-56819 An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter. POST /api/v1/data-provider/test HTTP/1.1 Host: test.com:8080 Content-Type: application/json Content-Length: 520 "name": "jdbc-data-provider", "type": "JDBC",...

CVE-2026-4480

🚨 CVE-2026-4480 - Critical Remote Code Execution in Samba Printing Subsystem Remote Code Execution RCE Samba Print Command Injection Vulnerability "A single print job name should never become a shell command." 📖 Overview CVE-2026-4480 is a critical command injection vulnerability affecting Samba'...

CVE-2025-5548

⚡ CVE-2025-5548: Vulnerability Research & Exploitation This repository provides a technical analysis and proof-of-concept walkthrough for CVE-2025-5548. This research covers the complete lifecycle of the vulnerability, from initial binary inspection to successful exploitation. ⚠️ Legal & Ethical...

Flowise-CVE-2025-58434-Chain-59528

FlowiseAI CVE Chain - ATO CVE-2025-58434 and RCE CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents This repository contains a Python proof-of-concept for chainin...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...

CVE-2025-7775

CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server OR NetScaler ADC and NetScaler Gateway 13.1,...

CVE-2025-55182

CVE-2025-55182 Vulnerability Detection and Exploitation Tool Project Introduction This tool is a GUI tool developed based on Java Swing, used for detecting and exploiting the CVE-2025-55182 vulnerability. This vulnerability is a security flaw in the Next.js framework that allows attackers to...

cve-2025-55182-poc

Basic Information CVE-2025-55182 is one of the most impactful Web framework vulnerabilities of 2025. React Server Components RSC are now the mainstream architecture for modern Next.js applications, and a large number of standard projects created with create-next-app are within the affected scope,...