cve-2025-55182-poc

CVE-2025-55182 React2Shell Vulnerability Analysis Lab This repository contains a complete environment for analyzing and reproducing CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting React 19.x and Next.js 15.x. ⚠️ WARNING: This project...

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...

sel4-ics-gateway-demo

seL4 ICS Gateway Demo A defensive security research project comparing protocol-break vs packet-forwarding architectures for protecting industrial control systems from cyber attacks. Documentation: Network Architecture - Network diagrams and traffic flow Container Architecture - Docker container...

elastic-peak-dashboards

PEAK Baseline Threat Hunt Dashboards Kibana / Security Onion 3.0 — Tier 1 & ICS Protocol Analysis Importable Kibana saved-object dashboards implementing the Splunk PEAK Baseline Threat Hunt methodology for cyber threat hunt CTH and incident response IR operations. Built and validated against...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Custom Python exploit for Xdebug ≤ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...

Moniker-Link-Lab-Setup

Moniker Link Lab Setup - CVE-2024-21413 🎯 Project Overview Hands-on penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft. This project documents the complete attack chain from setup to credential compromise, including real-world challenges and...

openssl-1.1.1g_CVE-2021-23840

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

openssl-1.1.1g_CVE-2022-0778

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina One Click 1. Create a Docx file. 2. In the Docx file, Insert Object Bitmap Image Ok 3. In the Paint application that launched, save the Paint file. 4. Save your Docx file. 5. Open your file as an archive With 7Zip; Right Click 7Zip Open...

CVE-2024-20137

CVE-2024-20137 Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 About the code This code is...

CVE-2022-30190

CVE-2022-30190 Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability MSRC / By msrc / May 30, 2022 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability...

opencanary

OpenCanary by Thinkst Canary OpenCanary is a multi-protocol network honeypot. It's primary use-case is to catch hackers after they've breached non-public networks. It has extremely low resource requirements and can be tweaked, modified, and extended. Overview OpenCanary runs as a daemon and...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

CVE-2025-55182-React2Shell-CVSS-10.0-

Affected Software: React Server Components versions 19.0.0, 19.1.0, 19.1.1, 19.2.0 Vulnerability Type: Pre-authentication Remote Code Execution via insecure deserialization. Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serializ...

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

CVE-2025-55182-React2Shell-Exploit

Next.js React2Shell CVE-2025-55182 Expl0it A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION LEGAL USE ONLY : Use exclusively against systems you...

CVE-2025-67733

RESP Protocol Injection PoC Proof-of-concept demonstrating RESP Protocol Injection vulnerability via Lua script error messages in Valkey/Redis. Files backend.py Flask backend simulating a web application with shared Valkey connection connection pooling. Endpoints: Method| Endpoint| Description...

CVE-2022-25064

CVE-2022-25064 Este script explota una vulnerabilidad de inyección de comandos del sistema operativo en el router TPLink WR840N, utilizando la función configure del protocolo IPv6...

CVE-2024-27304-PoC

CVE-2024-27304-PoC references DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste pgx SQL Injection via Protocol Message Size Overflow webapp A simple web application with login functionality. Only administrators can log in. This application uses PostgreSQL...

CVE-2025-55182_PoC

CVE-2025-55182 - PoC de RCE en React Server Components Autor: rl0x01 Descripción CVE-2025-55182 es una vulnerabilidad crítica CVSS 10.0 de Ejecución Remota de Código RCE que afecta a los Componentes del Servidor de React a través del protocolo Flight. Versiones Vulnerables Next.js| React ---|---...