Next.js-RSC-RCE-Scanner-CVE-2025-66478

Next.js RSC RCE Scanner and POC/Exploit Collection CVE-2025-66478 A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. This Scanner do not exploit the vulnerability Vulnerability Description...

CVE-2021-41773-Apache-Path-Traversal-Lab

Apache CVE-2021-41773 Security Lab A controlled cybersecurity lab developed during my internship at ITSOLERA PVT LTD to study and demonstrate CVE-2021-41773 , a path traversal and potential remote code execution vulnerability affecting Apache HTTP Server 2.4.49. 📌 Project Overview This project...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes is the client of a collaborative client-server plataform, being IBM Lotus Domino the application server. The email-client capability is one of its most important and used features. IBM Lotus Notes fails to correctly parse a PNG...

EXP_CVE-2018-19518

CVE-2018-19518 Disclaimer This program should only be used for authorized security testing and research. Please use it in compliance with network security laws. The author is not responsible for any illegal attacks or other unlawful actions resulting from the use of this tool. Usage python...

CVE-2023-6019

CVE-2023-6019 - Anyscale Ray Dashboard Unauthenticated RCE PoC exploit for CVE-2023-6019 — Remote Code Execution via unauthenticated Ray Dashboard Jobs API. Made by oguiii Description Anyscale Ray is an open-source framework for distributed ML/AI workloads. Versions prior to 2.6.4 expose a Jobs...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" Unauth RCE PoC PoC for the unauthenticated buildpublictmp code-execution flaw in Langflow. It uploads a malicious component to a public flow, triggers a build, and catches a reverse shell. For authorized security testing only. Use only against systems you own or...

wslink-vm-analyzer

WslinkVMAnalyzer WslinkVMAnalyzer is a tool primarily developed to facilitate analysis of Wslink, which is a unique loader running as a server and executing received modules in-memory. This tool uses Miasm, an open source framework that provides us with a symbolic execution engine. The tool and...

dynamorio

DynamoRIO About DynamoRIO DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling,...

php2shell

php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information last significant change: 21 October 2026 17:25 CEST Software list last status update: 22 October 2026 17:23 CEST TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities...

CVE-2023-33246_RocketMQ_RCE_EXP

CVE-2023-33246RocketMQRCEEXP CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on the extranet and lack permission verification. An attacker can exploit this...

CVE-2021-40373

CVE-playsms There is a vulnerability in playsms 1.4.3 that allows potential attackers to execute remote code execution. how to reproduce RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms login using admin:admin...

CVE-2026-61511

VBulletin RCE POC Telegram : @esp256 Support : massive/single scan Fofa Dork body="Powered by vBulletin" body="vbulletin/core/cpstyles" body="Powered by vBulletin" && body="6.2" body="Powered by vBulletin" && body="6.1" body="Powered by vBulletin" && body="6."...

Log4jHorizon

Log4jHorizon Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more. Crossing the Log4j Horizon - A Vulnerability With No Return Code and README.md this time around are a little scatered. Updates coming! Why? Proof of concepts for this vulnerability are scattered and have ...

exploit_CVE-2022-24112

exploitCVE-2022-24112 CVE-2022-24112 Installation git clone https://github.com/btar1gan/exploitCVE-2022-24112 Usage cd exploitCVE-2022-24112/ python3 508291.py && python3 508292.py If you have any feedback, please reach out...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

CVE-2021-21975

CVE-2021-21975 VMware vRealize Operations Manager API Server Side Request Forgery SSRF vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments while unifying public cloud...

CVE-2020-8165

CVE-2020-8165 Ruby on Rails For educational purposes only. See Reference for the details. Environment Ruby: 2.6.3 Rails: 5.2.3 Run $ git clone https://github.com/masahiro331/CVE-2020-8165.git $ bundle install --path vendor/bundle $ bundle exec rails db:migrate $ bundle exec rails s use redis $...

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE

WORDPRESS-CVE-2024-25600-EXPLOIT-RCE WORDPRESS-CVE-2024-25600-EXPLOIT-RCE - WordPress Bricks Builder Remote Code Execution RCE...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Remote Code Execution PoC A Go proof of concept for CVE-2025-59528 targeting Flowise versions Example go run main.go http://target.com h3D9jD7Xzi0V2KSrld9ff4P3rm6cuNXg1uA-wFsUYc "touch /tmp/pwned"...

CVE-2026-40175

🚨 CVE-2026-40175 - Critical Vulnerability in Axios Prototype Pollution Gadget → Remote Code Execution & Cloud Compromise 📢 Overview Axios — one of the most popular HTTP clients for JavaScript browser & Node.js — contains a critical vulnerability prior to version 1.15.0. A specific "gadget" attack...