CVE-2026-15409

🚨 CVE-2026-15409 Critical Unauthenticated SSRF in SonicWall SMA1000 Series Critical Server-Side Request Forgery SSRF vulnerability affecting SonicWall SMA1000 Series appliances. This repository documents the vulnerability, affected products, technical overview, impact, detection guidance, and...

WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE

The Super Backup & Clone - Migrate for WordPress plugin indeed-wp-superbackup is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to and including 2.3.3. Unauthenticated attackers can...

exploit-react-CVE-2025-55182

FOX-RSC TOOL CVE-2025-55182 & CVE-2025-66478 LEGAL DISCLAIMER EN: This tool is a Proof of Concept PoC intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author Tiger-Foxx assumes no...

CVE-2025-55182-POC-NEXTJS

CVE-2025-55182 React2Shell - Proof of Concept PoC This is a commercial, non-free Proof-of-Concept. Purchase Link: https://bit.ly/44G0ani Overview This repository contains a reliable, high-fidelity Proof-of-Concept PoC exploit for CVE-2025-55182 , also known as React2Shell. This is a critical CVSS...

CVE-2025-32433

🚨 CVE-2025-32433: Unauthenticated RCE in Erlang/OTP SSH Server Critical Pre-Authentication Remote Code Execution Vulnerability A severe flaw in the Erlang/OTP built-in SSH daemon allows unauthenticated remote attackers to achieve full remote code execution RCE by sending crafted SSH connection...

CVE-2025-32432

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...

Writing-Sample-1

Log4j: CVE-2021-44228 Summary of Log4j Vulnerability & Mitigations Table of Contents 1. Executive Summary 2. Identification of Vulnerable Endpoints and Services 3. Mitigations A. Block at the Border B. Install Endpoint Detection & Response EDR on Server Endpoints C. Place Vulnerable Enterprise Ap...

CVE-2020-5902-Vuln-Checker

CVE-2020-5902 Vulnerability Checker While looking at the vulnerabilty with fellow researchers we came to the idea that most of the current ways in which to test for the vulnerability can be classed as a form of compromise of the system. We wanted to develop a way in which to test the vulnerabilit...

CVE-2021-43936

CVE-2021-43936 CVE-2021-43936 एक गंभीर भेद्यता CVSS3 10.0 है जो WebHMI फर्मवेयर में रिमोट कोड निष्पादन RCE की ओर ले जाती है। यह भेद्यता संस्करण 4.0 और नवीनतम संस्करणों पर काम करती है। केवल 4.0.7475 पर परीक्षण किया गया है। स्क्रिप्ट द्वारा भेद्यता का उपयोग निम्नलिखित चरणों में किया जाता है: 1...

CVE-2025-37164-PoC

CVE-2025-37164 - HPE OneView बिना प्रमाणीकरण के RCE PoC CVE-2025-37164 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट, HPE OneView में एक गंभीर CVSS 10.0 बिना प्रमाणीकरण के रिमोट कोड निष्पादन कमजोरी। अस्वीकरण यह सॉफ्टवेयर केवल शैक्षिक और अधिकृत सुरक्षा परीक्षण उद्देश्यों के लिए प्रदान किया गया है। केवल उन...

FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain...

CVE-2023-22515-POC

CVE-2023-22515 CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center, a Broken Access Control vulnerability. Attlassian has provided a CVSS base score of 10.0 Exploit Brief explanation: 1- Due to how Xwork interceptors parses...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

react2shell-scanner

react2shell-guard ماسح أمان لـ CVE-2025-55182 - ثغرة حرجة CVSS 10.0 غير مصادق عليها لتنفيذ تعليمات برمجية عن بُعد في مكونات خادم React. ⚠️ إخلاء مسؤولية هذه أداة مسح أمني ، وليست أداة استغلال. صُممت لمساعدة المطورين وفرق الأمان في تحديد التبعيات الضعيفة في مشاريعهم. هذا مشروع مفتوح المصدر يحركه...

CVE-2021-22205

CVE-2021-22205 Gitlab CE/EE पर exiftool के माध्यम से Preauth RCE CVE का सारांश GitLab, प्रत्येक tiff/jpeg/jpg फ़ाइल को स्कैन करने के लिए ExifTool का उपयोग करता है ताकि किसी भी ऐसे टैग को हटाया जा सके जो श्वेतसूचीबद्ध नहीं हैं। लेकिन क्योंकि ExifTool फ़ाइल प्रकार निर्धारित करने के लिए फ़ाइल...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - React सर्वर घटक प्रोटोटाइप श्रृंखला भेद्यता यह POC वास्तविक [email protected] भेद्य कोड का उपयोग करके CVE-2025-55182 को प्रदर्शित करता है। CVE-2025-55182 आपातकालीन समाधान मार्गदर्शिका: Next.js/React RSC भेद्यता के लिए संपूर्ण विश्लेषण और शमन CVSS 10.0 यह रिपॉजिटरी...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - В Super Store Finder v3.6 обнаружено множество уязвимостей SQL-инъекций в компоненте поиска магазинов через параметры products, distance, lat и lng. Тип уязвимости SQL-инъекция Производитель продукта Super Store Finder База кода затронутого продукта Super Store...

cve-2025-55182-poc

CVE-2025-55182 React2Shell - Academic Proof of Concept ⚠️ DISCLAIMER: EDUCATIONAL USE ONLY This repository contains functional exploit code for a critical vulnerability CVSS 10.0. It is intended strictly for academic research, security analysis, and educational purposes. Do not use this code...

CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

CVE-2026-48907

CVE-2026-48907 — Joomla Content Editor JCE ≤ 2.9.99.4 में बिना प्रमाणीकरण के RCE CVE-2026-48907 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट — Joomla Content Editor JCE एक्सटेंशन में CVSS 10.0 का प्री-ऑथेंटिकेशन रिमोट कोड एक्जीक्यूशन RCE कमजोरी। शोध: Grayxploit Security Team विषय सूची...