CVE-2025-24893

CVE-2025-24893 XWiki Platform의 RCE 취약점을 위한 Bash POC 스크립트 사용 예시: netcat 리스너 설정: $ nc -nvlp 그런 다음 스크립트 실행: $ chmod +x cve.sh $ ./cve.sh 영향을 받는 버전: 5.4부터 15.10.11까지 16.0.0부터 16.4.1까지 면책 조항 이 도구는 교육 목적으로만 제공됩니다. 오용에 대해 어떠한 책임도 지지 않습니다...

study-CVE-2025-55182

CVE-2025-55182 연구 React Server Components의 Remote Code Execution RCE 취약점을 학습하기 위한 레포지토리입니다. 🔴 경고 교육 목적으로만 사용하십시오. 허가 없이 타인의 시스템에 사용하는 것은 불법입니다. 📋 취약점 개요 항목| 내용 ---|--- CVE ID| CVE-2025-55182 유형| Pre-authentication Remote Code Execution RCE CWE| CWE-502: Deserialization of Untrusted Data CVSS| 10....

POC-CVE-2025-55182

CVE-2025-55182 스캐너 Next.js 애플리케이션에서 CVE-2025-55182React Server Components RCE를 탐지하고 악용하기 위한 간단한 명령줄 도구입니다. 설치 chmod +x scanner.sh 사용법 기본 명령어로 스캔 id ./scanner.sh -d example.com 사용자 정의 명령어 실행 ./scanner.sh -d example.com -c "whoami" 전체 URL 사용 ./scanner.sh -d https://example.com -c "uname -a" 옵션 -d,...

CVE-2025-55184

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

CVE-2025-3616

Metasploit Module: Greenshift WordPress Plugin Arbitrary File Upload CVE-2025-3616 This repository contains a Metasploit module to exploit CVE-2025-3616 , an arbitrary file upload vulnerability in the Greenshift WordPress plugin versions 11.4 through 11.4.5. The exploit allows authenticated users...

CVE-2025-55182

CVE-2025-55182 Original author:https://github.com/msanft/CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Backgrou...

CVE-2025-55182-Lab

CVE-2025-55182 Lab CVE-2025-55182React2Shell 악용 실습 랩 - React Server Components의 원격 코드 실행RCE. ⚠️ 면책 조항 교육 목적으로만 사용하세요. 자신이 소유한 시스템에서만 테스트하세요. 빠른 시작 Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd CVE-2025-55182-Lab docker-compose up -d Wait 20 seconds, then...

roundcube-cve-2025-49113-lab

"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...

CVE-2025-52691

CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File Upload RCE Overview Critical unauthenticated arbitrary file upload allowing remote code execution. Field| Value ---|--- Product| SmarterMail Affected| Build 9406 and earlier CVSS| 10.0 Critical Type| Arbitrary File Upload Vector| HTTP...

CVE-2025-69460

CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...

React-Server-Components-Remote-Code-Execution-CVE-2025-55182-

이 저장소에는 README가 없습니다...

PT-2026-103328

Name of the Vulnerable Software and Affected Versions OrdaSoft Joomla CCK versions prior to 8.3.16 Description An unauthenticated remote code execution issue exists in the site/uploader.php endpoint, which is accessible via the getContent task. The system fails to perform authentication or Access...

ROS-20260930-73-0096

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.6:CLSA-2026:1771956020)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771956020 advisory. - GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

AlmaLinux 9.2 [TuxCare] Security Update: gegl04 / gegl04-devel / gegl04-devel-docs / gegl04-tools (ALMALINUX9.2:CLSA-2025:1765988423)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765988423 advisory. - GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

KLA91309 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...

KLA91311 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A...

Linux Distros Unpatched Vulnerability : CVE-2026-102306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1712263970)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1712263970 advisory. - A use-after-free flaw was found in the Linux kernel's SGI GRU driver in the way the first grufileunlockedioctl function is called ...

CVE-2026-102101: Deserialization of Untrusted Data

Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain conditions, allow crafted data to be deserialized unsafely, potentially resulting in remote code execution on the appliance. Exploitation depen...