CVE-2020-9496

CVE-2020-9496 XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03 Install requirements $ pip install -r requirements.txt $ wget https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar -O...

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

React2Shell-PoC

React2Shell-PoC A proof-of-concept exploit for CVE-2025-55182 and CVE-2025-66478 , critical Remote Code Execution vulnerabilities in React Server Components RSC and Next.js applications. Overview React2Shell demonstrates the exploitation of unsafe deserialization in Next.js server action handlers...

vuln-app-CVE-2025-55182

Vulnerable Next.js RSC Application - CVE-2025-55182 ⚠️ WARNING: This application is intentionally vulnerable for educational and security research purposes only. DO NOT deploy to production or expose to the internet. Overview This is a vulnerable Next.js application that demonstrates CVE-2025-5518...

CVE-2020-17144

weaponized tool for CVE-2020-17144Microsoft Exchange 2010 MRM.AutoTag.Model unsafe deserialize vulnerability build install .net framework 3.5 first, then make. usage CVE-2020-17144 After exploit, access http://target/ews/soap/?pass=whoami to get command execution. And you can also modify e.cs as ...

CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...

react2shell-lab

React2Shell - CVE-2025-55182 Lab A comprehensive laboratory for demonstrating and testing the critical vulnerability CVE-2025-55182 in React Server Components. ⚠️ Educational Purpose Only This repository is intended for: Security research and education Understanding vulnerability mechanisms Testin...

CVE-2020-9496

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in webtools xmlrpc and ping are not using authentication they are vulnerable to unsafe deserialization. This issue was reported to the security team by Alvaro Munoz [email protected] from the GitHub Security Lab team. This vulnerabilit...

CVE-2019-0192

CVE-2019-0192 - Apache Solr RCE 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5 This is an early PoC of the Apache Solr RCE From https://issues.apache.org/jira/browse/SOLR-13301: ConfigAPI allows to configure Solr's JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker coul...

CVE-2025-55182

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

CVE-2024-37054-PoC

MLflow Unsafe Deserialization CVE-2024-37054 Overview This repository documents research into CVE-2024-37054 , an unsafe deserialization issue affecting MLflow PyFunc model handling. In affected MLflow versions, loading an untrusted PyFunc model can cause Python deserialization logic to process a...

cve-2026-59827-metabase-cyber-range

CVE-2026-59827 — Metabase / H2 Unsafe Deserialization Cyber Range Educational laboratory modeling CVE-2026-59827 GHSA-w95f-x9v9-wv36: unsafe deserialization of H2 query result columns of type OTHER in Metabase. TRAINING ONLY — DO NOT EXPOSE TO THE INTERNET Quick start git clone...

CVE-2025-24016

CVE-2025-24016 An unsafe deserialization vulnerability in Wazuh servers allows remote code execution through unsanitized dictionary injection in DAPI requests/responses. This issue arises from the way DistributedAPI parameters are serialized as JSON and then deserialized using the aswazuhobject...

Bughound

What is Bughound? Bughound is an open-source static code analysis tool that analyzes your code and sends the results to Elasticsearch and Kibana to get useful insights about the potential vulnerabilities in your code. Bughound has its own Elasticsearch and Kibana Docker image that is preconfigure...

CVE-2026-59827

CVE-2026-59827 — Unsafe Deserialization of H2 Query Results in Metabase GHSA-w95f-x9v9-wv36 | CVSS 9.9 Critical | CWE-502: Deserialization of Untrusted Data Overview CVE-2026-59827 is a critical remote code execution vulnerability in Metabase, the popular open-source business intelligence and dat...

CVE-2024-2044

PoC CVE-2024-2044: pgAdmin 4 Authenticated RCE Linux/POSIX Repositori ini berisi skrip Proof of Concept PoC untuk CVE-2024-2044 , sebuah kerentanan kritis yang menggabungkan Authenticated Path Traversal dan Unsafe Deserialization pada pgAdmin 4 versi 8.3 ke bawah yang berjalan di lingkungan...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Reproduction Guide Disclaimer ⚠️ This tool is for security research and educational purposes only. Do not use it for illegal activities. ⚠️ Vulnerability Overview CVE-2025-55182 is a critical remote code execution RCE vulnerability in the Next.js framework. This...

CVE-2026-59827

CVE-2026-59827: Metabase Unsafe Deserialization in H2 Native Queries Severity: Critical CVSS 9.9 CVE: CVE-2026-59827 Advisory: GHSA-w95f-x9v9-wv36 Reporter: Matheus Gutierre @Gutierre0x80 Published: June 30, 2026 Vulnerability Summary An authenticated user with access to native SQL queries on an ...

CVE-2025-59287-WSUS-2

CVE-2025-59287 ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2025-59287 is a critical remote code execution vulnerability in Microsoft Windows Server Update Services WSUS. It stems from unsafe deserializatio...

CVE-2026-69098_exploit

CVE-2026-69098 — kotaemon unauthenticated deserialization RCE Unauthenticated remote code execution in kotaemon = 0.12.0 via insecure deserialization in the LLM-settings connection check. The bug kotaemon's LLM-settings checkconnection Gradio handler libs/ktem/ktem/llms/ui.py parses an...