CVE-2025-55183_POC

CVE-2025-55183 - Divulgación del código fuente de la función de servidor Next.js RSC Una vulnerabilidad de divulgación de código fuente en los Componentes del Servidor React RSC de Next.js. Una solicitud HTTP maliciosa enviada a una Función de Servidor vulnerable puede devolver de forma insegura ...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

bfac

BFAC Pruebas avanzadas de artefactos de archivos de respaldo para aplicaciones web BFAC Backup File Artifacts Checker es una herramienta automatizada que verifica artefactos de respaldo que pueden revelar el código fuente de la aplicación web. Los artefactos también pueden provocar la filtración ...

CVE-2025-55182

Escáner CVE-2025-55182 Este repositorio contiene una herramienta de escaneo para CVE-2025-55182 RCE y CVE-2025-55183 Divulgación de Código Fuente en React Server Components RSC de Next.js. ⚠️ Aviso legal Esta herramienta es solo para fines educativos y de pruebas autorizadas. No utilice esta...

GitDump

GitDump GitDump dumps the source code from .git when the directory traversal is disabled Requirements Python3 Tested on Windows Kali Linux What it does Dump source code from website/.git directory when directory traversal is disabled. How it works Fetch all common files .git/index, .git/HEAD,...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...

CVE-2022-43959

CVE-2022-43959 Vulnerabilidad de Bitrix CVE-2022-43959 Descripción Credenciales insuficientemente protegidas en la configuración del servidor AD/LDAP del módulo conector AD/LDAP de 1C-Bitrix Bitrix24 antes de la versión 23.100.0 permiten a administradores remotos descubrir la contraseña...

CVE-2024-38475

CVE-2024-38475 POC Credit : All credit to this guy: https://blog.orange.tw/ and https://x.com/orange8361 all i did was make a POC script from his research. Introduction : Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesyste...

RSC-Scanner-POC

Next.js RSC Source Code Disclosure Scanner A security scanner for detecting CVE-2025-55183 - Next.js React Server Components RSC source code disclosure vulnerability. Description This scanner detects source code disclosure in Next.js React Server Components RSC. A malicious HTTP request sent to a...

chall.stypr.com

chall.stypr.com Thank you for playing chall.stypr.com It has been nine years since I initially set up and hosted my wargame. Many CTFs have now already re-used or made similar challenges, so I've decided to share the sourcecode of all challenges and configurations used to host the challenge...

cgiemail-exploit

Cgiemail - Source Code Disclosure/Local File Inclusion Exploit cgiecho a script included with cgiemail will return any file under a websites document root if the file contains square brackets and the text within the brackets is guessable. cgiemail is currently shipped with cPanel, enabled by...

Myesve

myesve Marco de explotación CVE-2024-38475 – Versión 1.0 Aviso legal: Esta herramienta está destinada únicamente a pruebas de seguridad autorizadas, investigación educativa y programas de bug bounty legítimos. No la utilice contra sistemas que no posea o para los que no tenga permiso explícito pa...

CVE-2024-40275_Scanner

CVE-2024-40725 Scanner A Python-based detection tool for CVE-2024-40725 , an Apache HTTP Server source code disclosure vulnerability affecting versions 2.4.0 and 2.4.61. Legal notice: Only run this scanner against servers you own or have explicit written authorization to test. Unauthorized use ma...

EUVD-2026-63484

Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script contents outside its allowed path scope through GET /api/w/workspace/scripts/listsearch. The route-level scope middleware...

CVE-2026-52792

Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling filepath.Ext without first rejecting NTFS-equivalent names such as x.lua::$DATA, x.lua., and x.lua . An unauthenticated client can append one of thes...

CVE-2026-52792

Algernon (a pure-Go web server) prior to 1.17.9 is vulnerable to server-side script source disclosure on Windows via NTFS filename aliasing. The root cause is in engine/handlers.go: filepath.Ext() does not recognize NTFS-equivalent suffixes (::$DATA, trailing dot, trailing space) as the script ex...

CVE-2026-6332

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it...

CVE-2026-6332

CVE-2026-6332 describes a plaintext storage of sensitive information vulnerability in Schneider Electric’s EcoStruxure Machine Expert HVAC platform. The issue centers on how sensitive data (potentially including protected source code) is stored, which could lead to confidentiality loss if an auth...

CVE-2026-6402

A flaw was found in webpack-dev-server. When the development server operates over plain HTTP, a remote attacker can exploit a cross-origin source code exposure vulnerability. This allows a malicious website, visited by a developer, to load the bundled application source code as a script and read ...

PT-2026-25834

Name of the Vulnerable Software and Affected Versions ChargePoint Home Flex affected versions not specified Description The ChargePoint Home Flex software contains an information disclosure issue. Sensitive information was included in the source code. The issue was discovered by Sina Kheirkhah of...