rust-cve-2025-55182-scanner

CVE-2025-55182 Scanner Rust A high-performance, concurrent vulnerability scanner written in Rust for detecting CVE-2025-55182 Next.js Server Actions RCE across multiple targets. 🚀 Features ⚡ High-performance Rust implementation 🧵 Multi-threaded scanning engine ⏱ Adjustable timeout & retry system ...

CVE-2019-9978-RCE-PoC

CVE-2019-9978 RCE PoC – Social Warfare WordPress Plugin Exploit Unauthenticated Remote File Inclusion RFI to Remote Code Execution RCE 📌 Description This repository contains a Python-based Proof of Concept PoC demonstrating the exploitation of CVE-2019-9978 , a critical vulnerability in the Socia...

PIL-RCE-By-GhostButt

Exploiting Python PIL Module Command Execution Vulnerability Attack Python applications developed with PIL and achieve remote command execution. This project is used to host the paper and the source code and Dockerfile used in the experiments. Paper : https://xianzhi.aliyun.com/forum/read/2163.ht...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Details The vulnerability exists in the updateqrcode method of the...

n8n_CVE-2025-68613_exploit_payloads

n8nCVE-2025-68613exploitpayloads Expression injection payloads for n8n CVE-2025-68613 RCE LEGAL DISCLAIMER: This content is for educational purposes only. Author bears no responsibility for damages, misuse, or unauthorized exploitation of CVE-2025-68613. Test solely in isolated lab environments o...

CVE-2021-3129-Lab

CVE-2021-3129: Laravel Debug Mode RCE Lab Hands-on lab for exploiting CVE-2021-3129 - a critical Laravel vulnerability allowing unauthenticated file read and potential RCE. Quick Start Clone git clone https://github.com/theNareshofficial/CVE-2021-3129-Lab.git cd CVE-2021-3129-Lab Build & Run dock...

CVE-2026-21016-Malicious-PyPI-Package-Install-Hook-setup.py-Execution-

CVE-2026-21016 – Malicious PyPI Package Install Hook setup.py Execution Program Code Python setup.py - Malicious package that executes during install from setuptools import setup import os This runs on pip install os.system'id /tmp/pwnedbypackage' setup name='harmless-pkg', version='1.0',...

printnightmare-detection-lab

PrintNightmare Threat Detection & Incident Response Lab CVE-2021-34527 📌 Overview This project documents an end-to-end security monitoring, detection engineering, and incident response implementation targeting PrintNightmare CVE-2021-34527. PrintNightmare is a critical vulnerability in the Window...

CVE-2025-66956

CVE-2025-66956 Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL. CVSS Vectors CVSS 3.1: 9.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS 4.0: 10.0,...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC Demonstrates how CVE-2025-54100 can cause Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. What is CVE-2025-54100? Vulnerability Type: Risk of command injection when Invoke-WebRequest does not use the...

unrealircd3.2.8.1-local-exploit

Tested on Metasploitable 3 USAGE Ruby On Attacker's shell nc -nlvp 1111 On victim's shell ruby exploit.rb 127.0.0.1 Expected output on attacker's shell listening on any 1111 ... connect to 192.168.56.102 from UNKNOWN 192.168.56.105 48144 bobafett Python On victim's shell python3 exploit.py -ri...

CVE-2025-24367

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

CVE-2019-18935

CVE-2019-18935 Nuclei Template - Bounty Submission This repository contains a complete, validated Nuclei template for detecting CVE-2019-18935 Telerik UI for ASP.NET AJAX Deserialization RCE, created for the ProjectDiscovery bounty program. 🎯 Overview CVE-2019-18935 is a critical .NET...

CVE-2025-55182-PoC

React2Shell CVE-2025-55182 PoC Usage Interactive shell ./react2shell -u http://target:3000 Single command ./react2shell -u http://target:3000 -c "id" WAF bypass 128KB junk data ./react2shell -u http://target:3000 -waf 128 Build go build -o react2shell . Options Flag| Description ---|--- -u| Targe...

CVE-2021-42013

CVE-2021-41773 / CVE-2021-42013 Apache Vulnerability Scanner A comprehensive Python-based vulnerability scanner for detecting CVE-2021-41773 and CVE-2021-42013 path traversal and remote code execution vulnerabilities in Apache HTTP Server versions 2.4.49 and 2.4.50. Overview CVE-2021-41773 and...

Vulnerable-Lab-Exploitation

Vulnerable-Lab-Exploitation A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823. Vulnerable Lab Setup & PHP CGI Exploitation CVE-2012-1823 🎯 Project Overview This project demonstrates the creation of an isolated virtual lab...

CVE-2024-51378

CVE-2024-51378 — Summary, Mitigation, and Documentation Safe Repository ⚠️ Ethical & legal warning All materials in this repository are for educational purposes, legitimate security research, and testing on environments you own or have explicit permission. Do not run these tools or scripts against...

hackviser_labs_CVE-2015-3306

hackviserlabsCVE-2015-3306 This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab. run it using the following command: python3 exploit.py replace with the address you got from starting the lab on the hackviser platform...

CVE-2026-25512

CVE-2026-25512: Remote Code Execution via Command Injection in TNEF Handler - Group-Office CVSS 4.0 Vector : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Table of Contents Summary Affected Versions Technical Details Root Cause Source to Sink Flow Exploitation Automated Exploit...

CVE-2025-65753

CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote code execution on the Gryphon Guardian access point, firmware version 01.06.0006.22, through an improper TLS certificate validation. Description The Gryphon Guardian WiFi access point, with firmware version 01.06.0006.22, does not properl...