DEBIAN-CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

Explotando-FreeFloatFTP-CVE-2025-5548

Explotando-FreeFloatFTP-CVE-2025-5548 Bienvenido a mi repositorio de investigación y desarrollo de exploits. Este proyecto documenta el análisis técnico completo, la preparación del entorno y la explotación paso a paso de la vulnerabilidad CVE-2025-5548 Stack-Based Buffer Overflow encontrada en...

react2shell-scanner

react2shell-scanner Un escáner de vulnerabilidades de línea de comandos de alta fidelidad para detectar CVE-2025-55182 y CVE-2025-66478 Ejecución Remota de Código en aplicaciones Next.js que utilizan React Server Components RSC. 🚨 Resumen de Vulnerabilidades Estas vulnerabilidades críticas afecta...

CVE-2025-55182

CVE-2025-55182: React2Shell - Next.js Remote Code Execution Toolkit !WARNING This tool is provided for authorized testing and educational purposes only. Unauthorized network access and data exfiltration are illegal. Users are responsible for ensuring they have proper authorization before using th...

SNet

SNet 日本語版はこちら / Japanese version Un CTF donde usas IA para capturar la bandera. ¿Sin experiencia en pentesting? No hay problema. Claude Code actúa como tu entrenador personal: configura el entorno, te enseña las herramientas y te guía a través de técnicas de ataque reales paso a paso. Tú escribes...

CVE-2025-471812-POC

/ | / | / / | / / / |/ // / / / / / / &password= 2. El servidor autentica "anonymous" truncado en el byte nulo...

CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

EUVD-2026-95427

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-78663

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

CVE-2026-94439

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

CVE-2026-97031

Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. We now reject these as malformed and curb the memory amplification vector a...

CVE-2026-78659

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

react2shell

React2Shell Una herramienta CLI para explotar vulnerabilidades de contaminación de prototipos en Componentes de Servidor React / Acciones de Servidor CVE-2025-55182 y CVE-2025-66478, permitiendo la ejecución remota de código RCE en servidores vulnerables. PoC original :...

Unihackers---CVE-2025-55182-

PANDILLA ITALIANA React2Shell PoC Este repositorio proporciona un entorno mínimo intencionalmente vulnerable para probar escáneres de seguridad contra la reciente vulnerabilidad crítica RCE React2Shell que afecta a React Server Components y Next.js. CVE-2025-55182 : Existe una vulnerabilidad de...

CVE-2025-12999

A flaw was found in openvsx-server. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution on client machines through HTTP cache poisoning. The server generates download and verification URLs from untrusted proxy headers, such as X-Forwarded-Host, without...

EXPLOIT-CVE-2025-55182

CVE-2025-55182 Prueba de Concepto Resumen Una demostración práctica de CVE-2025-55182 React2Shell - una vulnerabilidad crítica de RCE en React Server Components. Detalles de la Vulnerabilidad CVE ID : CVE-2025-55182 Tipo : Ejecución Remota de Código mediante Contaminación de Prototipos Prototype...

AZL-106833 CVE-2026-107718 affecting package httpd 2.4.68-1

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...

CVE-2026-107718

AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL helper used by Router.makeUrl and Response.redirect.toRoute. If an...

CVE-2025-55182_liyon

CVE-2025-55182 - RCE en Componentes del Servidor de React ⚠️ Aviso legal : Esta herramienta es solo para fines de investigación de seguridad, pruebas de penetración autorizadas y educación. Usar esta herramienta contra sistemas objetivo sin permiso explícito es ilegal y poco ético. 📋 Resumen...