react2shell

React2Shell Go Version React2Shell is a high-performance vulnerability scanner written in Go, specifically designed to detect Server-Side Remote Code Execution RCE vulnerabilities in Next.js applications CVE-2025-55182 & CVE-2025-66478. This tool improves upon existing proof-of-concept scripts by...

CVE-2026-85756 SSH.NET: ScpClient allows server-side RCE via default SCP path handling

SSH.NET is a Secure Shell SSH library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every remote command interpreter. When an...

ImageMagick PDF/SVG Polyglot Server-Side RCE

Generate an SVG/MSL polyglot that executes a framework payload when processed by vulnerable ImageMagick/GraphicsMagick delegate chains. By default only the file is generated disablePayloadHandler=true; set disablePayloadHandler false to listen immediately after generation. Upload the generated fi...