Exploit for Use After Free in Microsoft

CVE-2025-62221-Exploit- Proof-of-Concept exploit for CVE-20...

Exploit for CVE-2025-9074

CVE-2025-9074-POC Proof-of-Concept exploit for CVE-2025-9074...

CVE-2025-65742

creationtimestamp| type| source ---|---|--- 2025-12-10 14:21:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/62424...

Exploit for CVE-2025-1974

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE Ingres...

CVE-2025-49173

creationtimestamp| type| source ---|---|--- 2025-12-10 09:00:05+00:00| published-proof-of-concept| Telegram/b0MrL-7YyNVMwlRE8cQmf3aSFWZZuNk0ErN3GEJH-SnDaRk...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182-PoC-exploit Next.js RCE via React Server Funct...

Exploit for CVE-2025-49173

CVE-2025-49173 — macOS 10.9 Local Root Privilege Escalation R...

📄 Chromodo Browser 45.8.12.391 Same Origin Policy Weakness

This proof of concept demonstrates message passing between two browser windows when opened under the same logical context same origin. It affect Chromodo Browser version 45.8.12.391...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 — demo This repository provides a demonstratio...

CVE-2025-65754

creationtimestamp| type| source ---|---|--- 2025-12-09 21:00:05+00:00| published-proof-of-concept| Telegram/qJ94TH8UxM1mvjtBkVVanzfaRAufPLEJcbQaTg-CgcLSXM...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell /$$$$$$$...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURIT...

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-C...

Exploit for Deserialization of Untrusted Data in Facebook React

PoC-react2...

📄 Cloudbleed Scanner

Cloudbleed Scanner is a comprehensive security tool designed to detect memory leak patterns similar to the 2017 Cloudbleed incident, where Cloudflare's reverse proxies leaked uninitialized memory containing sensitive data...

EUVD-2025-201806

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction...

Altcha Proof-of-Work obfuscation mode cryptanalytic break

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction...

Inadequate Encryption Strength

Overview altcha is a Privacy-first CAPTCHA widget, compliant with global regulations GDPR/HIPAA/CCPA/LGDP/DPDPA/PIPL and WCAG accessible. No tracking, self-verifying. Affected versions of this package are vulnerable to Inadequate Encryption Strength in the Proof of Work obfuscation scheme. An...

CVE-2025-65849

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated...

Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478)

The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit, as well as improved detection methods, exploitation mechanics observed in the wild, and rapidly growing atta...