CVE-2007-2447

CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...

CVE-2025-2011

CVE-2025-2011 PoC By: X3RX3S But Proudly ripped by Ash Wesker that GPT'd my code with his banner ; see here --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 You can even see my handle in 'his' code --' Purpose: A proof-of-concept tool to test for an SQL injection vulnerability CVE-2025-201...

n8n-CVE-2025-68613-TryHackMe

TryHackMe Room: n8n: CVE-2025-68613 Player: J4ck3LSyN Host: ... Username: [email protected] Password: Try12345! Methodology Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return...

CVE-2025-55182-Dockerized

CVE-2025-55182 - Dockerized Proof of Concept This repository contains a dockerized proof of concept for CVE-2025-55182, a critical remote code execution vulnerability in React Server Components RSC that affects Next.js applications using Server Actions. Credits The original proof of concept and...

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector Bypass CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 Incomplete Filtering of One or More Instances of Special Elements Published: November 26, 2025 Disclosed: October 19, 2025 Vulnerability Overview This...

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Xiaomi Mi Router 4A Gigabit - SSRF via Host Header Injection -orange Summary A Server-Side Request Forgery SSRF vulnerability exists in the Xiaomi Mi Router 4A Gigabit Edition. The router's web interface fails to validate the HTTP Host header, allowing an unauthenticated attacker ...

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

dragondance

Dragon Dance What is that? Dragon Dance is a plugin for Ghidra to get visualize and manipulate the binary code coverage data. Coverage data can be imported from the multiple coverage sources. For now the plugin supports Dynamorio and Intel Pin binary instrumentation tools. Dynamorio has its own...

Malware-analysis-and-Reverse-engineering

Malware-analysis-and-Reverse-engineering Some of my publicly available Malware analysis and Reverse engineering Reports, Tips, Tricks... Reverse engineering KPOT v2.0 Stealer Debugging MBR - IDA + Bochs Emulator CTF example TLS decryption in Wireshark Ryuk Ransomware - API Resolving and Imports...

CVE-2025-29632

Author: HanyiLuo, Yuqi Huo CVE-2025-29632 the information for the vulnerability covered by CVE-2025-29632 Affected versions: 4.0.0 and previous versions When free5gc processes the InitialUEMessage, it only checks whether the nASPDU reference is nil i.e., whether it is a null pointer, but does not...

Unauthenticated-RCE-FUXA-CVE-2023-33831

Unauthenticated RCE FUXA CVE-2023-33831 The vulnerability affects FUXA's scripting component, due to lack of control or sanitization on inputs that can be controlled by users, thus allowing the use of dangerous methods that can be scaled for remote code execution. The affected route is...

PoC-RCE-CVE-2025-55182

🔥 RSC RCE Exploit Toolkit Advanced exploitation toolkit for React Server Components Remote Code Execution vulnerabilities For authorized penetration testing and security research only Features • Installation • Usage • Shodan Integration • Examples • Disclaimer 📋 Table of Contents Overview...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 Woori FISA Technical Seminar 6th - Team 3: Analysis and research on React2Shell, a remote code execution RCE vulnerability exploiting design flaws in React Server Component RSC Team Member| Role| GitHub ---|---|--- 남인서| Research, PPT production, Presentation| @sene03 유승...

n8n-cve-2025-68613

CVE-2025-68613 – n8n Expression Injection RCE Toolkit ini menyediakan scanner dan exploit PoC untuk kerentanan kritis CVE-2025-68613 pada n8n Workflow Automation Platform. This repository provides scanner and exploit PoC scripts for the critical CVE-2025-68613 vulnerability affecting n8n Workflow...

CVE-2025-55182

CVE-2025-55182 Proof of concept for a Remote Code Execution RCE vulnerability in React Server Functions Next.js, etc.. Exploits prototype pollution to execute arbitrary code on the server without authentication. Warning : This repository is for educational and research purposes only. Unauthorized...

CVE-2019-16278

CVE-2019-16278 A simple and quick python script to exploit CVE-2019-16278 Nostromo 1.9.6 from a Directory Traversal vulnerability in the function httpverify in Nostromo nhttpd that leads to unauthenticated RCE via a crafted HTTP request. Only takes in host and port of web server as required...

tough-cookie-patch-cve-2023-26136

RFC6265 Cookies and CookieJar for Node.js Synopsis var tough = require'tough-cookie'; var Cookie = tough.Cookie; var cookie = Cookie.parseheader; cookie.value = 'somethingdifferent'; header = cookie.toString; var cookiejar = new tough.CookieJar; cookiejar.setCookiecookie,...

Apache-Lua-Buffer-Overflow-Exploit-CVE-2021-44790

🔥 CVE-2021-44790 - Apache modlua Buffer Overflow Exploitation 📋 Overview Apache modlua Buffer Overflow Exploitation is an advanced, enterprise-grade exploitation platform for CVE-2021-44790 - a critical buffer overflow vulnerability in the Apache HTTP Server 2.4.x modlua module. This framework...

gha-lab-ee08e207a8

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...