CVE-2025-55182

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension CVE-2025-55182 & CVE-2025-66478 This repository contains a security research toolkit designed to detect and demonstrate PoC the recently disclosed RCE vulnerabilities affecting React Server Components RSC / Next.js. The toolkit include...

CVE-2020-35667-PoC

CVE-2020-35667-PoC Overview DISCLAIMER The vulnerable behaviour illustrated below was verified empirically from decompiled, patched artifacts, which tries to resemble the original vulnerability inferred with an heuristic approach, since the original vulnerable plugin release is no longer availabl...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

react2shell-security-toolkit

🛡️ React2Shell Security Toolkit Security toolkit to detect and mitigate CVE-2025-55182 React2Shell vulnerability ⚠️ CRITICAL : This vulnerability CVSS 10.0 is being actively exploited! Quick Start npm install -g react2shell-security-toolkit npx react2shell-check What is CVE-2025-55182? Remote code...

-CVE-2025-55182

🔍 GitHub CVE Scanner - Usage Guide Script to scan GitHub repositories for known vulnerabilities in React and Next.js projects. 📋 Detected Vulnerabilities The scanner checks the following CVEs: CVE-2025-55182 : Vulnerability in React Server Components Affects: React 19.0.0, 19.1.0, 19.1.1, 19.2.0...

CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Description This repository contains a Python exploit for CVE-2019-16278 , a vulnerability in Nostromo 1.9.6 a web server. The vulnerability allows for Remote Code Execution RCE by exploiting...

TP-Link-TL-WR820N-CVE-2025-14175

🔐 CVE-2025-14175 Weak Algorithm Support in SSH Server – TP-Link TL-WR820N Overview This repository documents a security vulnerability identified in the SSH server implementation of the TP-Link TL-WR820N v2.80 router. The vulnerability allowed the use of weak cryptographic algorithms , potentially...

React2shell-ultimate-scanner

CVE-2025-55182 Advanced Scanner 🚀 A professional and automated security scanner to detect and validate CVE-2025-55182 , a critical vulnerability affecting Next.js React Server Components. Designed for security researchers, penetration testers, and bug bounty hunters who want fast, clean, and...

XPKeygen

XPKeygen A Windows XP / Windows Server 2003 VLK key generator. This tool allows you to generate valid Windows XP keys based on the Raw Product Key , which can be random. The Raw Product Key RPK is supplied in form of 9 digits XXX-YYYYYY and is only necessary to generate a Windows XP Key. Download...

Rust_CVE-2025-55182

CVE-2025-55182 Exploit Tool Rust Version Project Overview This project is a security research tool developed in Rust, targeting the Remote Code Execution RCE vulnerability present in [email protected]. The vulnerability allows an attacker to execute arbitrary code on a target server without...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

POC-CVE-2017-12615-or-CVE-2017-12717

POCCVE-2017-12615 CVE-2017-12615 for tomcat server Original POC: https://www.exploit-db.com/exploits/42953/...

SentryPeer

Protect your SIP Servers from bad actors Special thanks to Deutsche Telekom Security GmbH for sponsoring us! Very kind! Why not give us a star and follow us onTwitter! Table of Contents Introduction Overview Features Talks Adoption Design Docker Environment Variables Installation Homebrew macOS o...

HTTP-Basma

Adaptive Fingerprinting: HTTP-Basma's Multi-Stage Probing for Granular Server Differentiation HTTP-Basma is live at https://httpbasma.netomize.ca/ Introduction In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability...

CVE

CVE A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. CVE-2026-53264 Target: Linux Kernel Version: CentOS 9 kernel version 5.14.0-721 Exploit Written By: Lee Jia Jie CVE-2025-29824 Target: Windows Common Log Fi...

miasma

Miasma AI companies continually scrape the internet at an enormous scale, swallowing up all of its contents to use as training data for their next models. If you have a public website, they are already stealing your work. Many tools attempt to block scrapers, but what if you could punish them...

GOAD

GOAD v3 🔖 Documentation : https://orange-cyberdefense.github.io/GOAD/ Description GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environment ready to use to practice usual attack techniques. !CAUTION This lab is extremel...

cve-2018-1335

Ankara Yildirim Beyazit University Computer Engineering Department CENG 325 - Principles of Information Security And Privacy CENG201 OOP Project Group Members @canumay @aslihann @ezgigucuyener @mburakdonmez References NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - Command Injection...

pstf2

pstf^2 Passive Security Tools Fingerprinting Framework Have you ever wanted a simple, easy and stealth bypass for multiple classes of security products? pstf^2 pronounced pstf-square is an implementation of an HTTP server capable of passive browser fingerprinting - and it might just be the thing...