cve-2025-2082-POV

CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...

CVE-2022-29078

CVE-2022-29078 | EJS SSTI → RCE White Hat School 4th Class 32 - Sangbeom Woo @taka3636 Summary EJS tags, such as Hello . Internally, EJS compiles the template string into a JavaScript function and then executes it to generate the final HTML. In other words, it is a code generator that "converts...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Description This repository contains a Python-based Proof of Concept PoC for CVE-2025-32463, a local privilege escalation vulnerability in the sudo versions 1.9.14 through 1.9.17. When a user has sudo privileges to run a command within a chroot environment -R fla...

CVE-2025-55182-RCE-Exploit

POC for CVE-2025-55182 – Next.js 16.0.6 Remote Code Execution This repository contains a working proof-of-concept POC for CVE-2025-55182 , a critical deserialization vulnerability affecting Next.js 16.0.6. The exploit abuses $@ chunk deserialization and Chunk.prototype.then to gain full control...

CVE-2025-11391

Unauthenticated Blind SQL Injection in PPOM for WooCommerce prefix . PPOMTABLEMETA . " WHERE productmetaid = $metaid"; $res = $wpdb-getrow $qry ; return $res; An unauthenticated attacker can exploit this by crafting a malicious payload and injecting it into the ppomfieldsid parameter when adding ...

CVE-2024-11467

CVE-2024-11467 The macOS operating system uses XPC services for basic inter-process communication between various processes, such as between the XPC Service daemon and third-party application privileged helper tools. The VMware Horizon Client, upon installation, registers the...

CVE-2025-71389_exploit

CVE-2025-71389 — Cal.com Unauthenticated RCE react2shell Unauthenticated remote code execution in Cal.com = 5.9.8 via the React Server Components "Flight" deserialization flaw — "react2shell " CVE-2025-55182 in React, CVE-2025-66478 in Next.js. Cal.com bundles a vulnerable Next.js 15.x. A single...

CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...

CVE-2025-6019-Exploitation

CVE-2025-6019 – UDisks2 ResizeFilesystem Vulnerability Educational Reproduction This repository documents an educational reproduction of CVE-2025-6019 performed in a controlled lab environment Ubuntu VM, non-production. 🛡️ Security Notice This research reproduces CVE-2025-6019 in a sandboxed Ubunt...

CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack and Triofox full Poc/Exploit Summary This vulnerability arises from hardcoded cryptographic keys in Gladinet CentreStack and Triofox products, enabling arbitrary file read through forged access tickets. The AES-256 encryption implementation uses static, unchanging keys...

CVE-2025-46295-fix-fms

FileMaker Apache Commons JAR Replacer Overview The FileMaker Apache Commons JAR Replacer is an automation solution that addresses CVE-2025-46295 by replacing vulnerable Apache Commons JAR files in FileMaker Server installations. Instead of upgrading the entire FileMaker Server, this solution...

CVE-2025-49071

CVE-2025-49071 Flozen 1.5.1 - Unauthenticated Arbitrary File Upload Description : Flozen Theme 1.5.1 - Unauthenticated Arbitrary File Upload Description The Flozen Theme for WordPress versions up to and including 1.5.1 is vulnerable to unauthenticated arbitrary file upload, due to missing...

CVE-2025-55182-Attack-Analysis

CVE-2025-55182 Attack Analysis: React Server Components RCE Real-world attack analysis on a production Next.js application 📋 Table of Contents Executive Summary Vulnerability Overview Attack Timeline Technical Analysis Malware Analysis Indicators of Compromise IOCs Mitigation & Response Lessons...

Open5GS-CVE-2025-41067-CVE-2025-41068-PoC

Open5GS NRF Denial of Service CVE-2025-41067 & CVE-2025-41068 This repository contains Proof-of-Concept PoC exploit scripts for two high-severity vulnerabilities discovered in NewPlane's Open5GS. These vulnerabilities can be triggered by an attacker to cause a Denial of Service DoS in the NRF...

cve-2025-3248-exploit

CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability Scanner A comprehensive Python exploitation framework for testing and demonstrating CVE-2025-3248 , a critical unauthenticated remote code execution vulnerability in Langflow versions ≤ 1.3.0. 🔴 Vulnerability Overview CVE-2025-3248: Langfl...

react-vuln-scanner

React CVE-2025-55182 Vulnerability Scanner A bash script to scan your server for React applications vulnerable to CVE-2025-55182 — a critical remote code execution vulnerability CVSS 10.0 in React Server Components. ⚠️ About the Vulnerability On December 3, 2025, the React team disclosed a critica...

CVE-2018-6537.RCE

CVE-2018-6537 The exploit targets Sync Breeze running on Windows 10 x86, build: 16299 , affecting version 10.4.18 , where an unauthenticated attacker can perform a SEH overflow via a TCP-connection, resulting in remote code execution. This exploit assumes all security mitigations are disabled e.g...

CVE-2025-60854

CVE-2025-60854 D-link AX1500 Vulnerability I recently conducted a vulnerability analysis on a D-Link router and would like to document my findings. Target model: D-Link AX1500 Version : 1.20.01 and below The CVE number for this issue is currently published. The vulnerable function is as follows:...

CVE-2025-8422

CVE-2025-8422 Propovoice targetfile Examples: python3 cve-2025-8422-exploit.py https://example.com [email protected] python3 cve-2025-8422-exploit.py https://example.com [email protected] /../../../wp-config.php...

cve-2026-23989-opencloud-lab

CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale public-link scope bypass A self-contained, one-command lab that reproduces CVE-2026-23989 and proves it fixed, using the official upstream Docker images. A public share link that is supposed to grant access to one folder can be abused to read...