PoC-RCE-CVE-2025-55182

🔥 RSC RCE Exploit Toolkit Продвинутый инструментарий для эксплуатации уязвимостей удалённого выполнения кода в React Server Components Только для авторизованного тестирования на проникновение и исследований безопасности Возможности • Установка • Использование • Интеграция с Shodan • Примеры • Отк...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei Template This template is written for the Nuclei tool to detect the CVE-2025-25231 Secondary Path Traversal vulnerability in the Omnissa Workspace ONE UEM product. Vulnerability Description CVE-2025-25231 is a Path Traversal vulnerability that allows an attacker to access...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to ...

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analysis published on September 7. When Apache loads any of the three appliances' own PHP scripts, the malware adds the web shell to the copy...

CVE-2025-55182

React2Shell Ultimate Scanner CVE-2025-55182를 위한 전문가용 Next.js RSC RCE 취약점 스캐너 🎯 개요 React2Shell Ultimate는 React Server ComponentsRSC를 사용하는 Next.js 애플리케이션에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점인 CVE-2025-55182를 위한 종합 취약점 스캐너입니다. 템플릿 PoC 🚀 빠른 시작 root@kitploit: Execute command ./curlid.sh -d https://target.com...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2021-23369 DESCRIPTION: The package handlebars before 4.7.7 are vulnerable to Remote Code Execution RCE when selecting certain compiling options to compile templates coming...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-49458 DESCRIPTION: DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizenode, INPLACE: true accepted...

CyberStrikeAI v1.7.18

CyberStrikeAI 中文 | English The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next. CyberStrikeAI connects planning, execution, human oversight, evidence, and replay in one auditable...

Twenty-Three-Scanner

🛰️ Twenty-Three Scanner Telnetd 서비스 중 CVE-2026-24061 취약점에 영향을 받는 서비스를 탐지하기 위한 강력하고 , 빠르며 , 우아한 스캐너입니다. 순수 Python 표준 라이브러리로 제작되었으며, 외부 의존성이 전혀 필요 없습니다. -A32D2A?style=for-the-badge 🔗 목차 ⚖️ 라이선스 🧩 기능 ☣️ 취약점 세부 정보 ⚡ 서비스 상태 🧪 개념 증명 PoC 💥 영향을 받는 버전 🧵 패치된 버전 ⚔️ 공격 벡터 🚨 CVSS 점수...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

Инструмент эксплуатации CVE-2025-55182 Комплексный инструмент для исследований безопасности, предназначенный для тестирования уязвимости удалённого выполнения кода в React Server Components Next.js CVE-2025-55182. Обзор Этот набор инструментов предоставляет возможности автоматического обнаружения...

CVE-2025-14847

📝 MongoDB Scanner – Run Notes Script Name mongoexposurescanner.py 1. Prerequisites Python 3.9+ Network access to target hosts Approved scope for scanning Verify Python: root@kitploit: python3 --version 2. Files Used File| Purpose ---|--- mongoscanner.py| Scanner script targets.txt| Target hosts...

Malicious code in databricks-webapp-navigation-homepage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 31ec3549efe09642c539f13af8a2a75949a356f55046b6298c21a2deedda322c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-16080 Malicious code in databricks-webapp-navigation-homepage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 31ec3549efe09642c539f13af8a2a75949a356f55046b6298c21a2deedda322c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2026-25253-research

CVE-2026-25253 개념 증명PoC Cross-Site WebSocket Hijacking을 통한 OpenClaw 원클릭 RCE. 면책 조항: 이 코드는 승인된 보안 연구 및 교육 목적으로만 제공됩니다. 명시적인 서면 허가 없이 시스템에 대해 이 코드를 사용하는 것은 불법이며 비윤리적입니다. 저자는 오용에 대해 어떠한 책임도 지지 않습니다. 블로그 이 취약점의 소스 코드 수준 분석과 이 PoC가 어떻게 구축되었는지에 대한 자세한 내용은 상세 분석을 읽어보세요. 사전 요구 사항 Node.js v18 이상 피해자 머신에서...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 OS Command Injection A proof-of-concept exploit OS Command Injection for vulnerability in motionEye, a web frontend for the motion daemon. The vulnerability abuses the imagefilename configuration parameter, which is passed directly to the shell...

CVE-2024-7593_PoC_Exploit

CVE-2024-7593 Эксплойт-скрипт Этот Bash-скрипт является доказательством концепции PoC для эксплуатации уязвимости обхода аутентификации в Ivanti vTM CVE-2024-7593. Он позволяет пользователям создавать нового администратора на целевой системе. Содержание Предварительные требования Использование...

afrog v3.5.7

A Security Tool for Bug Bounty, Pentest and Red Teaming English • 中文 Download • Wiki • Afrog PoC 规则编写权威指南 PoC Contributors 不动明王 | 雪山 | White-hua | 123456 | ifofor | Air | !Typora-Logoh...

CVE-2022-2992

CVE-2022-2992 GitLab에서 GitHub 가져오기를 통한 인증된 원격 명령 실행. GitLab CE/EE의 11.10부터 15.1.6 이전의 모든 버전, 15.2부터 15.2.4 이전의 모든 버전, 15.3부터 15.3.2 이전의 모든 버전에 영향을 미치는 취약점으로, 인증된 사용자가 GitHub 가져오기 API 엔드포인트를 통해 원격 코드 실행을 달성할 수 있습니다...

RLSA-2026:64823 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

389-ds:1.4 security, bug fix, and enhancement update

An update is available for module.389-ds-base, 389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...