CVE-2026-33017

🚨 CVE-2026-33017 - Critical Unauthenticated Remote Code Execution in Langflow Langflow versions ≤ 1.8.2 contain a severe security vulnerability that allows unauthenticated attackers to achieve Remote Code Execution RCE on the server. 📊 Vulnerability Details 🧨 Root Cause The endpoint...

reditrap

RediTrap Honeypot RediTrap is a minimal Redis honeypot tailored to spot early attempts to exploit CVE-2025-49844 "RediShell", the critical Remote Code Execution vulnerability described by Wiz Research. The exploit abuses a 13 year old use-after-free bug in the embedded Lua engine: Redis would sto...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Arbitrary Code Execution via Untrusted JAR Loading -red?style=for-the-badge -brightgreen?style=for-the-badge Overview...

CVE-2026-22692

CVE-2026-22692: Critical Twig Sandbox Bypass via collect-mapInto allowing RCE/LFI/XXE October CMS Overview...

CVE-2026-40175

🚨 CVE-2026-40175 - Critical Vulnerability in Axios Prototype Pollution Gadget → Remote Code Execution & Cloud Compromise 📢 Overview Axios — one of the most popular HTTP clients for JavaScript browser & Node.js — contains a critical vulnerability prior to version 1.15.0. A specific "gadget" attack...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrator+ Arbitrary File Upload via 'mdjmemailuploadfile' Parameter The WordPress MDJM Event Management plugin version 1.7.8.3 and prior contains an arbitrary file upload vulnerability that allows authenticated administrators to upload maliciou...

CVE-2026-3844-Lab

CVE-2026-3844 — Breeze Cache Unauthenticated Arbitrary File Upload to RCE Lab Local-only Docker lab for reproducing and comparing CVE-2026-3844 behavior in the WordPress Breeze Cache plugin. This repository demonstrates the vulnerable behavior in Breeze Cache 2.4.4 and compares it with the patche...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit Toolkit Exploitation tools for CraftCMS Remote Code Execution vulnerability based on SensePost research. 📁 File Description 🎯 Main Tools 1. finalpoc.py - Final optimized POC Supports information disclosure and remote code execution Automatic asset ID discovery...

CVE-2025-55182

🚨 NextRce — CVE-2025-55182 Next.js / React Server Components RCE NextRce es una herramienta de investigación de seguridad que demuestra CVE-2025-55182 , una vulnerabilidad crítica en aplicaciones Next.js App Router que utilizan React Server Components RSC y Server Actions. Esta vulnerabilidad...

CVE-2022-41678

Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...

-CVE-2020-0796-SMBGhost-Windows-10-SMBv3-Remote-Code-Execution-Vulnerability

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

CVE-2025-55182-Scanner

🛡️ Escáner CVE-2025-55182 React2Shell Desarrollado por:SainiON Hacks Una herramienta GUI independiente para detectar y demostrar la vulnerabilidad de Ejecución Remota de Código RCE en React Server Components CVE-2025-55182 en aplicaciones Next.js. 📺 Demostración y Tutorial Mira el desglose complet...

CVE-2025-55182-TOOLS

CVE-2025-55182 Exploit Tool CVE-2025-55182 Comprehensive Exploitation/Detection Tool Developed byMingYi Security Lab Features Vulnerability Detection : Batch scan multiple targets for the vulnerability Path Scanning : Scan common Server Action endpoints to discover vulnerable paths Remote Code...

r2s

React2Shell R2S - CVE-2025-55182 Testing Tool Advanced exploitation testing tool for CVE-2025-55182 vulnerability assessment Features • Installation • Usage • Testing Environment • Legal 📖 What is R2S? R2S React2Shell is a security testing tool designed to help security researchers, developers, a...

CVE-2025-61304

CVE-2025-61304 "OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address" In the background the ping extension is using the command prompt of Windows to perform the ping. The input field for the Test Target Host is also 1024 chars long. After th...

PHP-8.1.0-dev-Backdoor

PHP 8.1.0-dev User-Agentt 백도어 원격 코드 실행 RCE 심각도: 치명적 CVSS 등가 점수: 10.0 취약점 유형: 공급망 백도어 / 원격 코드 실행 RCE 영향받는 소프트웨어: PHP 8.1.0-dev 개발 빌드에만 해당 공격 경로: 원격 인증 불필요 인증 요구: 없음 사용자 상호작용: 없음 영향: 전체 시스템 장악 개요 PHP 8.1.0-dev User-Agentt 백도어 는 오픈소스 소프트웨어 역사상 가장 악명 높은 공급망 손상 사례 중 하나입니다. 프로그래밍 실수에서 비롯된 일반적인 취약점과 달리,...

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 취약점 실습 랩 Docker로 배포된 취약한 Drupal 7.56 환경을 활용하여 CVE-2018-7600Drupalgeddon2 익스플로잇을 시연하는 교육용 실습 랩입니다. 이 프로젝트는 실제 환경과 유사한 취약점 평가 워크플로를 시뮬레이션하며, 다음을 포함합니다: 취약한 환경 구축 탐지스캐너 익스플로잇RCE 페이로드 분석 문서화 취약점 개요 CVE-2018-7600Drupalgeddon2은 Drupal CMS의 치명적인 원격 코드 실행RCE 취약점입니다. 이 문제는...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC

💻 CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC 🧩 Overview This project reproduces the MonikerLink behavior CVE-2024-21413 in a fully isolated TryHackMe environment to show how certain hyperlink formats can cause Outlook to process a link in a way that leaks...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...

cve-2026-0013-exploit

This repository does not have a README...