CVE-2024-21413

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 Usage Ensure you have appropriate permissions and authorization from the target system owner before using this script. Prerequisites Python 3.x impacket-smbserver Usage Example sudo python3 CVE-2024-21413.py 🛠️ Features...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

CVE-2025-68613

CVE-2025-68613 n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution RCE vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by...

yaml-payload-2

yaml-payload A SnakeYAML deserialization exploit payload for CVE-2022-1471 , adapted from artsploit/yaml-payload originally based on mbechler/marshalsec. What it does When loaded via SnakeYAML's unsafe Yaml.load, this payload takes over the running application and replaces it with a "You've Been...

CVE-2025-55184

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

react-cve-2025-55182-lab

Setup: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab cd react-cve-2025-55182-lab sudo docker build -t react-rsc-lab . sudo docker run -p 3000:3000 react-rsc-lab Exploit: curl --path-as-is -i -s -k -X $'POST' \ -H $'Host: localhost:3000' -H $'User-Agent:...

study-CVE-2025-55182

CVE-2025-55182 Study A repository for learning about the Remote Code Execution RCE vulnerability in React Server Components. 🔴 Warning For educational purposes only. Using it against others' systems without permission is illegal. 📋 Vulnerability Overview Item| Description ---|--- CVE ID|...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

Next.js-RSC-RCE-Scanner-CVE-2025-66478 CVE-2025-66478 Next.js vulnerability scanner. Detects whether a website is using a version of Next.js affected by the RSC React Server Components RCE vulnerability. Installation and Execution Using uv Recommended uv is a fast Python package manager. 1...

vulnerabilities in the FreeBSD bhyve hypervisor

The FreeBSD community has addressed several vulnerabilities in the bhyve Hypervisor. These vulnerabilities involve race conditions, incorrect validation, and synchronization issues in various device models within the bhyve Hypervisor. A malicious guest virtual machine can exploit these errors to...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Description The WooCommerce Designer Pro plugin for WordPress, widely used especially in themes such as Pricom - Printing Company & Design Services, is vulnerable to arbitrary file uploads due to a lack of proper file...

Simulation_CVE-2024-46256

CVE-2024-46256 & CVE-2024-46257 – PoC Simulation Overview This repository contains a step-by-step, image-backed Proof of Concept PoC simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution RCE after authentication. Affected product:...

CVE-2025-55182

CVE-2025-55182 Original author:https://github.com/msanft/CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Backgrou...

CVE-2026-20841-PoC

CVE-2026-20841 - Windows Notepad App Remote Code Execution Vulnerability Vulnerability Overview Field| Detail ---|--- CVE ID| CVE-2026-20841 Title| Windows Notepad App Remote Code Execution Vulnerability Impact| Remote Code Execution Max Severity| Important CVSS v3.1 Base / Temporal| 8.8 / 7.7 CV...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

MSTeams---Vulnerability---Remediation

🛡️ Remediation of CVE-2025-53783: Microsoft Teams RCE 📝 Project Overview This project demonstrates a Vulnerability Management Workflow. Using an Azure VM, I identified a high-severity "Remote Code Execution" RCE flaw in Microsoft Teams, verified its existence through PowerShell, and deployed a...

php2shell-exploit

php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

mitigation-cve-2019-9787

mitigation-cve-2019-9787 POC 1. simply xss : 2. simple csrf: attacker's website code--- https://github.com/kuangting4231/wordpress.github.io 3. csrf remote code execution: attacker's website code--- https://github.com/kuangting4231/assigment1.github.io mitigation 1. fix the logic flaw in the...