React2Shell-Scanner

CVE-2025-55182 and CVE-2025-66478 Vulnerability Checker A non-intrusive detection tool for identifying vulnerable React Server Components RSC implementations affected by CVE-2025-55182 React and CVE-2025-66478 Next.js. This tool performs active detection using benign, non-malicious payloads to...

react2shell-vulnlab

React2Shell Tribune — VULNERABLE WEB APPLICATION LAB A modern Next.js web app themed as a news / blog portal for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional news portal built...

Erlang-OTP-PoC_CVE-2025-32433

Erlang/OTP SSH Pre-Authentication Channel Confusion 📺 Proof of Concept Video Description: A demonstration of the Erlang/OTP SSH Pre-Authentication Channel Confusion vulnerability. Click here to watch the full demo on YouTube Abstract What is this PoC about? This Proof of Concept demonstrates...

React2Shell-CVE-2025-55182

CVE-2025-55182 — React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server — no credentials, no prior access needed. / / / /| |/ / \ / / / / / / / / // / / // / // | //...

Harald

Harald CPU Harald is an in-memory tiny high-level CPU, able to process a set of instructions to generate application-layer protocols to be used over a given network protocol TCP/UDP. Harald will consume a stream of OPCODES and apply different transformations to the payload for it to be suitable f...

JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution

JetBrains TeamCity 2026.1.3, 2025.11.7 contains a remote code execution caused by unsafe XStream deserialization in the unauthenticated agent polling protocol. The XStream instance serving /app/agents/v1 is created without NoTypePermission.NONE, so XStream's default type permissions Throwable, Ma...

CVE-2022-30190

CVE-2022-30190 aka Follina Vulnerability Description Follina exists in the Microsoft Support Diagnostic Tool MSDT. When an application calls MSDT via a URL protocol for support, a remote code execution vulnerability occurs. Successful exploitation allows an attacker to execute arbitrary code with...

CVE-2026-33829

CVE-2026-33829 This repository contains an automated Bash tool designed to passively and controllably audit and verify whether Windows OS assets are vulnerable to insecure manipulation of the search: protocol handler. The script acts as a passive listener, using tcpdump to capture outgoing...

CryptoLyzer

CryptoLyzer es un analizador rápido, flexible y completo de protocolos criptográficos de servidor TLS, SSL, SSH, IKE, DNSSEC y configuraciones relacionadas cabeceras HTTP, registros DNS y generador de huellas digitales JA3, HASSH con interfaces API y CLI. Use CryptoLyzer cuando necesite auditar...

outlook-auto-register

Outlook Auto Register Pure-protocol Microsoft Outlook bulk registration · PerimeterX solver · Web console · Proxy pool / account pool / liveness checks What it solves · Screenshots · Quick start · Proxy · Anti-ban guide · 中文 · Tiếng Việt Repository : lxf746/outlook-auto-register For learning and...

react2shell-lab

React2Shell - CVE-2025-55182 Lab A comprehensive laboratory for demonstrating and testing the critical vulnerability CVE-2025-55182 in React Server Components. ⚠️ Educational Purpose Only This repository is intended for: Security research and education Understanding vulnerability mechanisms Testin...

doggie

Descripción general del proyecto Doggie y evilDoggie Doggie es un proyecto modular de código abierto diseñado para construir un adaptador CAN Bus a serial USB, BLE, UART casero. Conecta tu computadora a una red CAN Bus mediante el protocolo slcan CAN sobre Serial para compatibilidad con...

dismap

🌀 Dismap - Herramienta de descubrimiento e identificación de activos 中文 Readme Dismap se posiciona como una herramienta de descubrimiento e identificación de activos. Puede identificar rápidamente protocolos e información de huellas digitales como web/tcp/udp, localizar tipos de activos y es...

Vision-MSI-Thermal-Control

Vision MSI Thermal Control MSI Modern 15H AI C1MG-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold 🎯 Purpose of this Project This application was born out of necessity for MSI laptop users on Linux. The journey began when I discovered that...

PT-2026-110610

Name of the Vulnerable Software and Affected Versions AnyDesk versions prior to 8.0.3 Description A heap-based buffer overflow occurs in the session protocol stream packet handler for mode 5 because a payload length value is not validated. This allows unauthenticated remote attackers to execute...

EulerOS 2.0 SP13 : mariadb-connector-c (EulerOS-SA-2026-4162)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb-connector-c / mariadb-connector-c-config / etc (ALMALINUX9.2:CLSA-2026:1791795699)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791795699 advisory. - MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated us...

AlmaLinux 9.6 [TuxCare] Security Update: mariadb-connector-c / mariadb-connector-c-config / etc (ALMALINUX9.6:CLSA-2026:1791796759)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791796759 advisory. - MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated us...

ROS-20261012-73-0073

The vulnerability of the rpcrdmapostrecvs function in the net/sunrpc/xprtrdma/verbs.c module of the Linux operating system’s RPC protocol implementation is related to incorrect initialization of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

EulerOS 2.0 SP11 : mariadb-connector-c (EulerOS-SA-2026-4254)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validat...