Next.js-Proof-of-Concept

Next.js CVE 概念実証 このリポジトリには、3つのNext.js脆弱性に対する再現可能な概念実証（PoC）環境が含まれています。各PoCには、脆弱なターゲット、修正済みターゲット、および両者の動作の違いを示すスクリプトが含まれています。 このプロジェクトの目的は、各問題の根本原因と実際の影響を、最小限の環境で簡単に観察できるようにすることです。 含まれる脆弱性 CVE| アドバイザリ| 影響| 脆弱なバージョン| 修正済みバージョン ---|---|---|---|--- CVE-2025-29927| GHSA-f82v-jwr5-mffw|...

Vulnerable-Web-App-Scanner

Vulnerable-Web-App-Scanner Pent...

Netsia SEBA+ 0.16.1 Authentcation Bypass / Add Root User

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netsia SEBA+ %q This module exploits an authentication bypass in Netsia SEBA+, triggered by add new root/admin user. HTTP requests made to the...

Exploit for Improper Input Validation in Apache Unomi

CVE-2020-13942 POC + Automation Script Steps S...

pwntools

This repository is an offensive tool for binary exploitation. The primary vulnerability targeted by this tool is not explicitly stated in the provided context, but it is likely a remote code execution RCE vulnerability, given the nature of the tool. The target product/service or framework is not...

MySql.Com Hacked with Blind SQL Injection by Jackh4xor !

MySql.Com Hacked with Blind SQL Injection by Jackh4xor ! The Mysql website offers database software, services and support for your business, including the Enterprise server, the Network monitoring and advisory services and the production support. The wide range of products include: Mysql clusters...

dns-update NSE Script

Attempts to perform a dynamic DNS update without authentication. Either the test or both the hostname and ip script arguments are required. Note that the test function will probably fail due to using a static zone name that is not the zone configured on your target. Script Arguments dns-update.te...

Macromedia Flash ActionDefineFunction Memory Access (CVE-2005-2628)

A remote code execution vulnerability exists in the Macromedia Flash plugin. The flaw is created by insufficient validation checks of user input values. This vulnerability may be exploited by a malicious user to inject and execute arbitrary code on the target host. In a successful attack, an...