1267654 matches found
CVE-2025-55184
React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...
CVE-2025-3616
Metasploit Module: Greenshift WordPress Plugin Arbitrary File Upload CVE-2025-3616 This repository contains a Metasploit module to exploit CVE-2025-3616 , an arbitrary file upload vulnerability in the Greenshift WordPress plugin versions 11.4 through 11.4.5. The exploit allows authenticated users...
CVE-2025-55182
CVE-2025-55182 Original author:https://github.com/msanft/CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Backgrou...
CVE-2025-55182-Lab
CVE-2025-55182 Lab A hands-on lab to exploit CVE-2025-55182 React2Shell - Remote Code Execution in React Server Components. ⚠️ Disclaimer Educational purposes only. Only test on systems you own. Quick Start Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd...
roundcube-cve-2025-49113-lab
"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...
CVE-2025-52691
CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File Upload RCE Overview Critical unauthenticated arbitrary file upload allowing remote code execution. Field| Value ---|--- Product| SmarterMail Affected| Build 9406 and earlier CVSS| 10.0 Critical Type| Arbitrary File Upload Vector| HTTP...
CVE-2025-69460
CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...
EUVD-2026-94049
NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
EUVD-2026-94105
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...
CVE-2026-104335
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...
React-Server-Components-Remote-Code-Execution-CVE-2025-55182-
This repository does not have a README...
CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
CVE-2026-88962
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-88962 , which allows a remote authenticated attacker to execute arbitrary code. The root cause is identified as CWE-94: Improper Control of Generation of Code ('Code Injection') . Successful exploitation could lead to high-im...
EUVD-2026-94110
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
CVE-2026-93443 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...
EUVD-2026-94109
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...
CVE-2026-93443
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a flaw involving the improper neutralization of special elements used in code. This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution . While no specific exploit links or scanner source co...
CVE-2026-93449 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...