275697 matches found
CVE-2021-44228-playground
LOG4SHELL-CVE-2021-44228-Validator About This tool allows you to verify whether a simple Java web app is vulnerable to CVE-2021-44228 for a user provided version of Java and of Log4J. You can also optionally apply one of a view pre-defined mitigations. The simulation lab spun up by...
CVE-2026-47117-openmed-rce
CVE-2026-47117: OpenMed Unauthenticated Remote Code Execution via PII Model Loading Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...
CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit
🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework 📑 Table of Contents Legal Disclaimer & Ethical Notice Overview Key Capabilities Quick Start Guide Architecture & Feature Deep Dive Configuration Reference Automated Test Suite Remediation &...
CVE-2021-41773
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal & RCE ⚠️ For isolated, educational lab use ONLY. This repository builds a deliberately vulnerable Apache server. Never run it on a live, production, or internet-facing host. Red Team internship project by Team Alpha ITSOLERA — Offensive...
teamcity-CVE-2026-63077-pcap
teamcity-CVE-2026-63077-pcap teamcity teamcity-CVE-2026-63077 exploitation pcap info: https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/ https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077/ Target: teamcity server 2025.11.3 docker 192.168.64.31 po...
MySQL-Remote-Root-Code-Execution
MySQL-Remote-Root-Code-Execution Usage root@kitploit: python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...
CVE-2025-55182_PoC
CVE-2025-55182 - PoC de RCE en React Server Components Autor: rl0x01 Descripción CVE-2025-55182 es una vulnerabilidad crítica CVSS 10.0 de Ejecución Remota de Código RCE que afecta a los Componentes del Servidor de React a través del protocolo Flight. Versiones Vulnerables...
CVE-2025-25257
CVE-2025-25257 Exploits for CVE-2025-25257 released by watchtowr and others I found on github did not work on my installations of fortiweb downloaded from the official vendor website. I ripped some of these exploit codes to make a poc capable to pop a reverse shell on my environment. IP address a...
CVE-2024-2887-REPORT
SSD Advisory – Google Chrome RCE Source: ssd-disclosure.com/ssd-advisory-google-chrome-rce Summary A critical remote code execution vulnerability in Google Chrome versions 123 and earlier affecting WebAssembly WASM garbage-collection type handling. The bug allows type confusion that can be...
CVE-2026-47103-python-statemachine-rce
CVE-2026-47103: Python StateMachine Remote Code Execution via SCXML eval Injection Severity: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...
CVE-2024-4577-PHP-RCE
PHP RCE PoC CVE-2024-4577: Inyección de Argumentos en PHP-CGI Resumen Este repositorio contiene scripts para verificar la vulnerabilidad CVE-2024-4577, un problema de inyección de argumentos en PHP-CGI. Puede usar los scripts Bash, Go y Python proporcionados para probar una lista de dominios para...
react2shell
React2Shell Exploit de prueba de concepto para CVE-2025-55182, una vulnerabilidad de ejecución remota de código no autenticada, también conocida como React2Shell. El script se utiliza para obtener una shell en versiones de Next.js anteriores a: 15.0.4 y anteriores 15.1.8 y anteriores 15.2.5 y...
Project-Project-Chimera-Exploiting-a-Modern-WordPress-XXE-to-Pillage-Secrets-
Objetivo del Proyecto: Demostrar una cadena de ataque completa sobre una instalación vulnerable de WordPress, explotando CVE-2021-29447 XXE en la biblioteca de medios para lograr ejecución remota de código y compromiso total del sistema. Fase 1: Reconocimiento y Enumeración Escaneo de Red con Nma...
CVE-2025-55182
CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...
React2Shell-CVE-2025-55182-Testing-Environment
React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...
xwiki_solrsearch-rce-exploit
solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...
CVE-2012-2982-Webmin-RCE
Webadmin 1.580 RCE PoC CVE-2012-2982 This repository contains a Python proof-of-concept PoC exploit for Webmin version 1.580 , which is vulnerable to Remote Command Execution RCE due to improper input sanitization. The vulnerability exists in the file/show.cgi component and allows an authenticate...
apache-cve-2021-42013-rce
apache-cve-2021-42013-rce Docker-based penetration testing lab simulating CVE-2021-42013 vulnerability Path Traversal & RCE on Apache HTTP Server 2.4.49. This project is prepared to simulate and exploit the CVE-2021-42013 vulnerability found in Apache HTTP Server 2.4.49 in an isolated environment...
CVE-2025-55182
CVE-2025-55182.yaml PoC de CVE-2025-55182 nuclei -target url -t CVE-2025-55182.yaml Adaptado de nuclei-template Código principal: root@kitploit: "then":"$1:proto:then","status":"resolvedmodel","reason":-1,"value":""then":"$B1337"","response":"prefix":"var...