React2shell-ultimate-scanner

Escáner Avanzado CVE-2025-55182 🚀 Un escáner de seguridad profesional y automatizado para detectar y validar CVE-2025-55182 , una vulnerabilidad crítica que afecta a Next.js React Server Components. Diseñado para investigadores de seguridad, testers de penetración y cazadores de bugs que desean u...

CVE-2019-9193-Postgresql-RCE

uso: CVE-2019-9193.py -h -i IP -p PORT -d DATABASE -c COMMAND -t TIMEOUT -U USER -P PASSWORD ejemplo: python3 CVE-2019-9193.py -i 127.0.0.1 -p 5432 -U postgres -c 'id' ejemplo 2 : python3 CVE-2019-9193.py -h localhost -p 5432 -U postgres -c 'id' salida: + Conectando a la base de datos PostgreSQL ...

CVE-2024-13985

CVE-2024-13985 — Dahua EIMS capturehandle.action Remote Code Execution Advisory type: Vendor-coordinated security disclosure · Active exploitation reported CVE ID: CVE-2024-13985 CNVD ID: CNVD-2024-17054 Vendor: Zhejiang Dahua Technology Co., Ltd. Product: EIMS Enterprise Information Management...

Lab-for-cve-2018-15133

Resumen: Explotación de la vulnerabilidad de deserialización CVE-2018-15133 Este exploit aprovecha una vulnerabilidad de deserialización en Laravel Framework hasta 5.5.40 y 5.6.x hasta 5.6.29. Descripción La ejecución remota de código podría ocurrir como resultado de una llamada a unserialize sob...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - Easy Download for a Security Tool 📥 Download Now 📖 Overview This application is a proof of concept for CVE-2025-38352. It demonstrates a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin notes that this vulnerability ha...

Spring-Kafka-POC-CVE-2023-34040

Spring Kafka Deserialization POC Requirements Java 11 Maven Docker or Kafka Usage First start up the Dockerized Kafka instance. This will start up Kafka and make it available on port 29092. docker-compose up Start up the Consumer application. cd spring-kafka-consumer mvn clean install mvn...

ecp_slap

ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...

CVE-2020-10199_POC-EXP

Affected versions + + EXP: python3 cve-2020-10199poc.py 1.1.1.1 8081 0.9567822851573897 edfca15e-c721-45e2-bdef-e8b3c6364ddb + + VER: Nexus Repository Manager OSS/Pro version...

osquery_cve-2024-23443

Proof of Concept POC CVE-2024-23443 hpbiososquery Add osqery extension HP BIOS WMI to Elastic Agent Dependencies pip install pywin32 pip install osquery pip install pyinstaller Build pyinstaller --onefile hpbiosenumeration.py Install 1. Copy extension to Elastic agent location copy...

mcp-stdio-shellguard

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-stdio-shellguard Defense-in-depth bundle for MCP stdio servers. Wraps childprocess.exec/spawn with allowlist + sandbox + replay-detection, plus an AST audit CLI mcp-shellguard-audit that scans MCP server sources for...

ghostlock-app

GhostLock-App 中文: READMEZH.md Supported Devices Kernel| Devices ---|--- 6.1.115-android14-11-ga2521ca27699-ab13294383| POCO X6 Pro 6.1.118-android14-11-ga3b9c44908dd-ab13320413| Redmi Note 15 Pro+ 6.1.118-android14-11-gca0ef6d17716-ab13624819| Xiaomi 14...

CVE-2026-44034

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

DEBIAN-CVE-2026-44034

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

CVE-2026-44034

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

CVE-2026-105076

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through 3.6.1...

MilkSad-Mnemonic-Generator

Milk Sad Mnemonic Generator This tool is designed to generate BIP-39 mnemonic phrases 24-word seed phrases based on Unix timestamps, specifically exploring phrases that could be generated through the "Milk Sad" vulnerability CVE2023-39910. What This Tool Does The Milk Sad Mnemonic Generator creat...

CVE-2025-55182

CVE-2025-55182 Proof of concept for a Remote Code Execution RCE vulnerability in React Server Functions Next.js, etc.. Exploits prototype pollution to execute arbitrary code on the server without authentication. Warning : This repository is for educational and research purposes only. Unauthorized...

React2Shell-CVE-2025-55182-Advanced-Scanner

CVE-2025-55182 Escáner Avanzado Herramienta avanzada de pruebas de penetración para detectar y explotar la vulnerabilidad CVE-2025-55182 en aplicaciones Next.js 📋 Tabla de Contenidos Visión General Características Instalación Uso Ejemplos Técnicas de Bypass Detalles Técnicos Aviso Legal...

CVE-2023-46805

CVE-2023-46805 Scanner CVE-2023-46805 Scanner for possible vulnerable Ivanti Connect Secure appliances by country using Shodan. Script version: 1.3 Updated with the recent blog post made by Assetnote ⚠️ This script is for defensive purposes and should be used by cybersecurity professionals to...

cve_2023_38831_scanner

CVE-2023-38831 Scanner Overview The CVE-2023-38831 Scanner is an advanced cybersecurity tool designed to detect and analyze the presence of the CVE-2023-38831 vulnerability in WinRAR installations. This project implements a multi-layered approach to vulnerability detection, incorporating file...