CVE-2025-55182-Dockerized

CVE-2025-55182 - Dockerized Proof of Concept This repository contains a dockerized proof of concept for CVE-2025-55182, a critical remote code execution vulnerability in React Server Components RSC that affects Next.js applications using Server Actions. Credits The original proof of concept and...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS Command Injection PoC Description This repository contains a Proof of Concept PoC for CVE-2026-35585 , a critical OS Command Injection vulnerability discovered in File Browser versions 2.0.0 through 2.33.1. The vulnerability exists in the "Custom Command Hooks"...

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...

git_rce

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2021-46703

CVE-2021-46703 Simple payload builder based on POC in: https://github.com/Antaris/RazorEngine/issues/585 Usage C dotnet build --configuration Release .\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText"rce.txt", "Hello World";" Python ./poc.py "System.IO.File.WriteAllText"rce.txt",...

CVE-2022-22965_PoC

Spring Framework RCE exploitation Quick pentest notes Step 1: Find some endpoint in your target where is accepted POST/PUT methods + encode your payload URL encode POST /path/upload HTTP/1.1 Host: Origin: Cookie: JSESSIONID=BE65B534335A5A2538624404C063B70C; Content-Type:...

Umay

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

cve-2025-55182-poc

Basic Information CVE-2025-55182 is one of the most impactful Web framework vulnerabilities of 2025. React Server Components RSC are now the mainstream architecture for modern Next.js applications, and a large number of standard projects created with create-next-app are within the affected scope,...

CVE-2025-55182

CVE-2025-55182 React Server Components Remote Code Execution CVE-2025-55182 and Next.js Remote Code Execution CVE-2025-66478. This vulnerability primarily affects the Server Actions functionality in react-server-dom-webpack. Due to missing security validation when parsing client-submitted forms, ...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

ZimbraExploit

ZimbraExploit K8Cscan calls Zimbra8.8.11 Remote Code Execution Vulnerability GetShell https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...

CVE-2020-0041

CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical. commands...

CVE-2022-29078

CVE-2022-29078 vuln ejs 3.1.6 docker Setup git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Usage http://127.0.0.1:49160/ Exploit In browser...

ripple20-digi-connect-exploit

Ripple20 Exploit: Digi Connect ME 9210 Authors: Moshe Kol, Shlomi Oberman This repository contains a PoC exploit for CVE-2020-11896, a critical heap-based buffer overflow vulnerability in the Track TCP/IP stack part of the Ripple20 vulnerability suite. The exploit achieves remote code execution R...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

CVE-2021-44228-log4Shell

CVE-2021-44228-log4Shell exploit Exploit Test runs ping to google.com execute any command prints OS name, version and arch collect details about the OS and User opens calculator on remote machine can execute any executable download this README.md from github Run the ExploitTest java ExploitTest...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...