CVE-2025-55182-EXP

CVE-2025-55182 Exploitation Tool Tool Introduction This tool is used to detect and exploit the CVE-2025-55182 vulnerability presumably a code execution vulnerability in frameworks related to Next.js. It supports single-target / multi-target batch detection, command execution, interactive shell, a...

CVE-2025-7783-poc

form-data boundary randomness vulnerability CVE-2025-7783 Largely based on https://hackerone.com/reports/2913312 by https://hackerone.com/parrot409?type=user Installing: npm install Make sure you have python3 installed with the z3 module pip3 install -r requirements.txt -- the exploit code shells...

swap_digger

swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...

ghauri

Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...

cve-2025-55182

CVE-2025-55182 aka React2Shell Setup test enviornment kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up POC Payload 1. RCE with response in body POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever Content-Type: multipart/form-data;...

-CVE-2021-44790

CVE-2021-44790 Description of CVE-2021-44790 CVE-2021-44790 describes a system-level security vulnerability in the modlua of the Apache HTTP Server, specifically in version 2.4.51 and earlier versions. This vulnerability is triggered when the r:parsebody function improperly handles HTTP...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

react2shell-cve-2025-55182

🚨 React2Shell - CVE-2025-55182 Exploitation Framework Advanced exploitation framework for CVE-2025-55182 Next.js Remote Code Execution Author: opsecramdan 📚 Table of Contents Overview Vulnerability Details Features Requirements Installation Usage Interactive Shell Output Files Impact Mitigation...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF bypass CVE-2026-21876 docker container + minimal PoC. I would like to thank @airween and @fzipi separately for their quick response! The vulnerability fix was ready in a very short time. PoC POST /submit HTTP/1.1 Host: localhost User-Agent: curl/8.17.0 Accept: / Origi...

CVE-2026-97394

kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-www-form-urlencoded or multipart/form-data request bodies,...

EUVD-2026-102143

kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-www-form-urlencoded or multipart/form-data request bodies,...

CVE_2021_27850_POC

Usage git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command Assuming the HMAC key is change this immediate...

CVE-2025-55182-Scanner

🛡️ CVE-2025-55182 Scanner React2Shell Developed by:SainiON Hacks A standalone GUI tool to detect and demonstrate the React Server Components Remote Code Execution RCE vulnerability CVE-2025-55182 in Next.js applications. 📺 Demo & Tutorial Watch the full breakdown and tool demonstration on my...

cve-2025-66478_rce_vulnerable

Modern Blog with shadcn/ui A modern and elegant blog built with Next.js 16, React 19, shadcn/ui and Tailwind CSS. IMPORTANT: Next JS VULNERABLE project created solely for educational, testing and exploitation purposes, NOT RECOMMENDED FOR PRODUCTION DEPLOYMENT, ONLY FOR LOCAL OR CONTROLLED...

s2-048

s2-048 Exp for s2-048, CVE-2017-9791. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...

CVE-2017-5638

LAB 1 — Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045 I. SYSTEM ANALYSIS Attack Surface Analysis After starting the container, Struts2 logs show that the application loads familiar configuration files such as struts-default.xml , struts-plugin.xml , and struts.xml. This confirms that the...

cve-2025-55182

CVE-2025-55182 Python Exploit Python 3 script that can be used to demonstrate CVE-2025-55182. It exploits a server-side JavaScript injection vulnerability in Next.js/React applications, allowing remote code execution via malformed multipart form data. ⚠️ For educational and authorized testing...

react2shell-scanner

React2Shell Vulnerability Scanner A safe, non-invasive scanner for detecting React Server Components RSC and Next.js Remote Code Execution vulnerabilities CVE-2025-55182 & CVE-2025-66478. Overview This scanner helps organizations identify whether their web services are vulnerable to the React2She...

CVE-2025-55182-GUI

CVE-2025-55182 Vulnerability Detection and Exploitation Tool GUI Version Project Overview This project is a graphical detection and exploitation tool targeting the high-risk CVE-2025-55182 vulnerability, developed with Python + tkinter to provide a fully graphical interface. It eliminates the nee...

CVE-2026-0993

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP...