20115 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - Next.js/React Server Components Remote Code E...
Exploit for Deserialization of Untrusted Data in Facebook React
React2S...
Exploit for Deserialization of Untrusted Data in Facebook React
🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concep...
📄 Craft CMS 5.0 Logic Flaw
A flaw in the Craft CMS image transform endpoint allows an unauthenticated attacker to trigger backend processing without prior authentication. While the original Metasploit module targeted remote code execution, this proof of concept does not execute code, does not write files, and does not inje...
CVE-2025-65849
CVE-2025-65849 concerns Altcha Proof-of-Work obfuscation mode (version 0.8.0 and later). The Red Hat and NVD entries describe a cryptanalytic break that allows remote attackers to recover the Proof-of-Work nonce in constant time via mathematical deduction. The supplier disputes the claim of a cry...
PT-2025-49588
A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction...
CVE-2025-65849
A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated...
CVE-2025-65849
A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated...
Exploit for Deserialization of Untrusted Data in Facebook React
Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66...
Exploit for Improper Output Neutralization for Logs in Splunk
SPLUNK CVE-2025-20384 i dunno, i just read stuff my friendo s...
Exploit for CVE-2025-9074
CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell CVE-2025-55182 PoC Usage bash Interacti...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - PoC SCRIPT /!\ Disclaimer...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React Server Components RCE - Go PoC ⚠️ FOR...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 CVE-20...
Exploit for Code Injection in Pivotal_Software Spring_Data_Commons
SpringBoot-Toolkit An interactive penetration-testing tool de...
Exploit for Deserialization of Untrusted Data in Facebook React
REACT2SHELL CVE-2025-55182 CVE-2025-55182 & CVE-2025-66478 p...
CVE-2025-65300
creationtimestamp| type| source ---|---|--- 2025-12-06 07:53:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/61880 2025-12-06 15:00:08+00:00| published-proof-of-concept| Telegram/uvU3gBnf9Z1WMovVGRRTdFZDjWMl1qRCMdPMKGqSGuqnW3I...
CSV Injection
Overview org.webjars.npm:json-2-csv is an A JSON to CSV and CSV to JSON converter that natively supports sub-documents and auto-generates the CSV heading. Affected versions of this package are vulnerable to CSV Injection via the preventCsvInjection option which can be bypassed. An attacker can...