CVE-2025-55182-EXP

Strumento di sfruttamento della vulnerabilità CVE-2025-55182 Descrizione dello strumento Questo strumento serve a rilevare e sfruttare la vulnerabilità CVE-2025-55182 presumibilmente una vulnerabilità di esecuzione di codice nei framework correlati a Next.js. Supporta rilevamento batch su singolo...

EUVD-2026-67937

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by...

CVE-2026-82333

multer , a Node.js middleware for handling multipart/form-data, is vulnerable to a remotely triggerable denial of service (CVSS 7.5 HIGH). An attacker can send a small multipart request containing two specially crafted text field names: a large numeric array index in the first field allocates a m...

CVE-2026-77063

multer , a Node.js middleware for handling multipart/form-data, contains a race condition in its file stream handling that is triggered when an application uses an asynchronous fileFilter together with the fileSize limit . An attacker can exploit this to cause a file that exceeds the configured s...

CVE_2021_27850_POC

Utilizzo dei comandi root@kitploit: git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command Supponendo che l...

cve-2025-66478_rce_vulnerable

Moderner Blog mit shadcn/ui Ein moderner und eleganter Blog, erstellt mit Next.js 16, React 19, shadcn/ui und Tailwind CSS. WICHTIG: Next JS VULNERABLES Projekt, nur für Bildungszwecke, Tests und Exploitation erstellt. INSTALLATION IN PRODUKTION NICHT EMPFOHLEN, NUR FÜR LOKALE ODER KONTROLLIERTE...

CVE-2025-55182-React2Shell-Async-Scanner

⚡ React2Shell CVE-2025-55182 / CVE-2025-66478 - एसिंक्रोनस RCE स्कैनर प्रोटोटाइप-प्रदूषण → React सर्वर क्रियाओं के माध्यम से रिमोट कोड निष्पादन एसिंक्रोनस, संस्करण-प्रथम, आउटपुट-आधारित कैनरी पहचान - कोई अंधा अनुमान नहीं !WARNING केवल अधिकृत सुरक्षा अनुसंधान और प्रवेश परीक्षण के लिए। स्पष्ट लिखित...

s2-048

s2-048 Exploit für s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

ROOT-APP-NPM-CVE-2026-12143 CVE-2026-12143 in form-data - Patched by Root

Root has patched CVE-2026-12143 in the form-data package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-7783 CVE-2025-7783 in form-data - Patched by Root

Root has patched CVE-2025-7783 in the form-data package for Root:npm. Multiple fixed versions available...

-CVE-2021-44790

CVE-2021-44790 Descrizione di CVE-2021-44790 CVE-2021-44790 descrive un bug di sicurezza a livello di sistema presente in modlua di Apache HTTP Server, in particolare nella versione 2.4.51 e precedenti. La vulnerabilità viene attivata quando la funzione r:parsebody gestisce in modo improprio le...

CVE-2017-5638

LAB 1 — Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045 I. SYSTEMANALYSE Angriffsflächenanalyse Nach dem Starten des Containers zeigen die Struts2-Protokolle, dass die Anwendung bekannte Konfigurationsdateien wie struts-default.xml , struts-plugin.xml und struts.xml lädt. Dies bestätigt, das...

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Introduzione al progetto CVE-2025-55182 è una vulnerabilità ad alto rischio presente nella catena di elaborazione dei componenti server RSC di Next.js. Un attaccante, costruendo apposite richieste multipart/form-data e blocchi di risposta RSC falsificat...

CVE-2025-55182-NextJS-RCE-PoC

CVE-2025-55182 React2Shell Ambiente di riproduzione ⚠️ SOLO A FINI EDUCATIVI Questo repository è stato creato esclusivamente per scopi educativi e di ricerca. Dimostra una vulnerabilità critica nei React Server Components Next.js per aiutare gli sviluppatori a comprendere i rischi e l'importanza d...

react2shell-cve-2025-55182

🚨 React2Shell - CVE-2025-55182 Exploitation Framework Framework di exploitation avanzato per CVE-2025-55182 Remote Code Execution su Next.js Autore: opsecramdan 📚 Indice Panoramica Dettagli della Vulnerabilità Funzionalità Requisiti Installazione Utilizzo Shell Interattiva File di Output Impatto...

CVE-2025-55182-GUI

CVE-2025-55182 Инструмент для обнаружения и эксплуатации уязвимостей GUI версия Описание проекта Данный проект представляет собой инструмент с графическим интерфейсом для обнаружения и эксплуатации критической уязвимости CVE-2025-55182 , разработанный на Python с использованием tkinter. Полностью...

CVE-2026-21876

CVE-2026-21876 Bypass do WAF OWASP CRS Container docker CVE-2026-21876 + PoC mínimo. Gostaria de agradecer separadamente a @airween e @fzipi pela resposta rápida! A correção da vulnerabilidade ficou pronta em muito pouco tempo. PoC root@kitploit: POST /submit HTTP/1.1 Host: localhost User-Agent:...

CVE-2025-7783-poc

vulnerabilidade de aleatoriedade do boundary form-data CVE-2025-7783 Baseado largamente em https://hackerone.com/reports/2913312 por https://hackerone.com/parrot409?type=user Instalação: npm install Certifique-se de ter python3 instalado com o módulo z3 pip3 install -r requirements.txt -- o códig...

React2Shell

React2Shell – Framework avanzato di scoperta e sfruttamento Un avanzato scanner e sfruttatore di vulnerabilità React Server Components RSC per CVE-2025-55182 e CVE-2025-66478 che colpiscono applicazioni Next.js. Questo strumento espande la ricerca e il proof-of-concept originale di React2Shell...

cve-2025-55182

CVE-2025-55182 alias React2Shell Imposta ambiente di test root@kitploit: kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up POC Payload 1. RCE con risposta nel corpo root@kitploit: POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever Content-Type...