React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key...

CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-

CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNING : This script is for educational purposes and testing in authorized environments only. Unauthorized use is prohibited and may be illegal. 📋 Description This repository contains a...

coolify-cve-2025-66209-66213

Coolify Security Advisories - CVE-2025-66209 through CVE-2025-66213 Reporter: 0xrakan Vendor: coollabsio/coolify Affected Versions: v4.0.0-beta.451 Fixed Version: v4.0.0-beta.451 Severity: Critical CVSS 9.4 Overview Five critical authenticated command injection vulnerabilities were discovered in...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

CVE-2020-6287_RECON-scanner

Vulnerability Assessment and Indicator of Compromise IoC Scanner for CVE-2020-6287 RECON RECON Remotely Exploitable Code On NetWeaver is a critical CVSSv3 10 vulnerability affecting a number of SAP business and technical applications running on top of the SAP NetWeaver Java stack. This...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com...

CVE-2021-41773

CVE-2021-41773 I have developed a POC of CVE-2021-41773 , RCE + cgi-bin path traversal NOTE : TESTED ON APACHE2 2.4.49 You can pulled vuln Apache2 2.4.49 directly from Docker $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80 blueteamsteve/cve-2021-41773:no-cg...

CVE-2021-23758-POC

CVE-2021-23758-POC this repo has been created for training on the vulnerability in the ajaxpro. disclosed with the ID number CVE-2021-23758. POC POST /ajaxpro/CVE202123758POC.demo,CVE202123758.ashx HTTP/2 Host: localhost:44375 Content-Length: 567 Sec-Ch-Ua: " Not A;Brand";v="99", "Chromium";v="96...

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. Resource Vuln Info https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data Usage nuclei -t...

CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...

CVE-2018-11235

CVE-2018-11235 RCE vulnerability to exec "git clone --recurse-submodule" CVE-2018-11235...

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...

CVE-2019-9580

CVE-2019-9580 - StackStorm exploiting CORS null origin to gain RCE Prior to 2.10.3/2.9.3, if the origin of the request was unknown, we would return null. null can result in a successful request from an unknown origin in some clients. Allowing the possibility of XSS style attacks against the...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated CVE-2025-5196 Wing FTP Server provides an administrative Lua scripting console accessible via its web interface. Authenticated administrators are able to execute arbitrary Lua code with insufficient sandboxing. Affected Version: Wing FTP...

CLEANSTART-2023-PQ45543 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-WS00387 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-LN29601 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-PU29121 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...

CLEANSTART-2023-AM62889 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk

Security vulnerability affects the netatalk package. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk...