CVE-2019-10068-PoC

CVE-2019-10068 PoC for Kentico CMS Proof of concept exploit for CVE-2019-10068, leveraging a Deserialization RCE in Kentico CMS to upload a web shell. Legal Disclaimer: This proof-of-concept is provided for educational and authorised security research purposes only. The author is not responsible...

CVE-2025-55182-react2shell

CVE-2025-55182: Detector de Componentes de Servidor de React RSC Expuestos Este repositorio contiene una plantilla de Nuclei para detectar la exposición de Componentes de Servidor de React asociada con CVE-2025-55182. La vulnerabilidad afecta a aplicaciones construidas con React/Next.js donde la...

OSWE-Labs-Poc

OSWE - LABORATORIOS Laboratorios dockerizados para la certificación Web Expert OSWE. Preparación para la próxima formación AWAE ... Otro proyecto: análisis de malware y caza de amenazas cibernéticas https://github.com/svdwi/BlueBox Laboratorios disponibles para el OSWE 1. ATutor es un Sistema de...

CVE-2025-24813-PoC-exploit

CVE-2025-24813-PoC-exploit Apache Tomcat Deserialization RCE root@kitploit: ❯ python3 exploit.py http://localhost:8080/ "id" ============================================================ CVE-2025-24813 - Apache Tomcat Partial PUT RCE ============================================================...

CVE-2015-5254

CVE-2015-5254 ActiveMQ Deserialization RCE 0x01 sure port 61616 is open nmap -p 61616 -Pn -T5 -n -sC -sV 10.10.20.166 root@kitploit: root@kali: nmap -p 61616 -Pn -T5 -n -sC -sV 10.10.20.166 Starting Nmap 7.70 https://nmap.org at 2019-08-30 02:05 EDT Nmap scan report for 10.10.20.166 Host is up...

cve-2019-1003000-jenkins-rce-poc

PoC: Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security, CVE-2019-1003001 Pipeline: Groovy, CVE-2019-1003002 Pipeline: Declarative A proof of concept to allow users with Overall/Read permission and Job/Configure and optional Job/Build to bypass the sandbox protection and execute arbitra...

ibm-sterling-b2b-integrator-poc

IBM Sterling B2B Integrator PoC Proof of concept code for the exploitation of the vulnerabilities discovered against IBM Sterling B2B Integrator, versions 6.2.0.0 to 6.2.0.2, and 6.0.0.0 to 6.1.2.5 for Linux, Windows and AIX systems: LPE Command Injection - if authentication is disabled Pre-auth...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet Deserialization RCE Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A perfect-10 deserialization chain in Fortra GoAnywhere MFT: a forged license response signature lets an...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start...

SharePoint-CVE-2025-53770-POC

OurSharePoint - CVE-2025-53770 PoC Esta es una herramienta sencilla en C que construye una carga útil de .NET DataSet comprimida con GZip y codificada en Base64, utilizando una carga útil interna codificada con LosFormatter. Está diseñada para ayudar a reproducir la cadena de ejecución remota de...

HTB-Reactor-Linux-Machine-Walkthrough

HTB: Reactor !CAUTION Spoiler warning. This is a full walkthrough including flags. If you want to solve the machine yourself, close this now and come back when you're stuck. Machine Info Field| Details ---|--- Name| Reactor OS| Ubuntu 24.04 LTS Noble Difficulty| Medium CVE| CVE-2025-55182 CVSS 10...

CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE SECURITY-3972 PoC for the Jenkins deserialization vulnerability fixed on 2026-09-02 advisory. A low-privileged account holding Item/Configure on any single job can turn that into arbitrary code execution as the Jenkins OS user...

react2shell

React2Shell CLI tool + Nuclei templates for detecting two critical RCE vulnerabilities in React Server Components and Next.js Server Actions. The scanner was rewritten based on the disclosed react2shell vuln. Vulnerability Overview CVE-2025-55182 – React Server Components Deserialization RCE A fl...

Project-Vuln-Detection-N-Mitigation_101

Project-Vuln-Detection-N-Mitigation101 Apache ActiveMQ Deserialization RCE CVE-2023-46604 – Phase 2 Project Security Architectures & Systems Administration Author: Vaishnavu C V · Date: 17 Sep 2025 Status: ⌀ Phase 2 deliverables complete Overview This repository documents a hands‑on security desi...

CVE-2026-50522

🛡️ CVE-2026-50522 — Investigación de RCE en Microsoft SharePoint Vulnerabilidad crítica de deserialización de SharePoint en explotación activa Creado por Pratik Chhetri Fecha del informe: 2026-07-27 📌 Resumen ejecutivo...

CVE-2021-2302

CVE-2021-2302 Autor: quynhle Cadena de gadgets root@kitploit: javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...

log4j-4255

log4j2 4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject A self-contained, containerised lab that reproduces Apache log4j2 issue4255 end-to-end against the official Log4j 2.26.1 artifacts on JDK 17 , with positive controls, a hardened oracle, and a validated...

CVE-2025-55182-Exploit

CVE-2025-55182 — Next.js Flight Deserialization RCE Remote Code Execution exploit for Next.js Server Actions Flight deserialization vulnerability 📌 Overview This repository contains a working exploit for CVE-2025-55182 , a deserialization vulnerability in the Next.js Flight protocol Server Action...

Weblogic_CVE-2020-2883_POC

POC for weblogic CVE-2020-2883 poc1: root@kitploit: javax.management.BadAttributeValueExpException.readObject com.tangosol.internal.sleepycat.persist.evolve.Mutations.toString java.util.concurrent.ConcurrentSkipListMap$SubMap.size java.util.concurrent.ConcurrentSkipListMap$SubMap.isBeforeEnd...

CVE-2026-47875 JobParameterDeserializer bypasses the trusted-type allowlist

Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data source for the job repository. The JobParameterDeserializer does not properly enforce the trusted-types allowlist, allowing an...