React4Shell

React2Shell Exploit Proof of Concept PoC for React Server Components RSC / Next.js Remote Code Execution vulnerability. Description A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei Template Description This repository contains a Nuclei template for detecting the CVE-2024-32030 vulnerability. This vulnerability allows for remote code execution via JMX Metrics Collection JNDI Resolution. Vulnerability Details ID: CVE-2024-32030 Name: JMX Metrics Collecti...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...

CVE-2026-47670

CVE-2026-47670 Authenticated Remote Code Execution via loadReader functionName code injection in DbGate DbGate is an open-source, cross-platform database management tool designed for developers and database administrators who need to work with multiple database systems simultaneously. It provides...

CVE-2024-12877

CVE-2024-12877 GiveWP – Donation Plugin and Fundraising Platform = 3.19.2 - Unauthenticated PHP Object Injection Description The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Vulnerability A deserialization vulnerability in the OpenWire transport unmarshaller in Apache ActiveMQ. Affected versions include 5.18.0 through to 5.18.2, 5.17.0 through to 5.17.5, 5.16.0 through to 5.16.6, and all versions before 5.15.16. Setup Change the Values inside the...

React2Shell-Kingdom

React CVE-2025-55182 Vulnerability Demonstration Project ⚠️ SECURITY WARNING This project demonstrates a critical RCE vulnerability CVE-2025-55182 / React2Shell in React Server Components 19.1.1. FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES ONLY NEVER deploy to production or expose to untrusted...

CVE-2021-24499

CVE-2021-24499 Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other wa...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

CVE-2026-48908-PoC

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908 , a critical CVSS 4.0 = 10.0 unauthenticated remote-code-execution vulnerability in the SP Page Builder component comsppagebuilder for Joomla, by JoomShaper. | ---|--- CVE| CVE-2026-48908...

Follina_MSDT_CVE-2022-30190

Microsoft explains that “a remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker ca...

CVE-2026-22444

CVE-2026-22444 Apache Solr UNC Path Validation Vulnerability Overview This vulnerability was discovered and disclosed to Apache in 2025. It affects Apache Solr's core creation functionality, where network access to UNC paths occurs before path validation checks are performed. On Windows systems...

CVE-2024-27115-Exploit

SOPlanning 1.52.01 - Remote Code Execution RCE Authenticated Exploit Details Exploit Title : SOPlanning 1.52.01 Simple Online Planning Tool - Remote Code Execution RCE Authenticated Date : 6th October, 2024 Exploit Author : Ardayfio Samuel Nii Aryee Version : 1.52.01 Tested on : Ubuntu Descriptio...

CVE-2026-27574-OneUptime-RCE

CVE-2026-27574-OneUptime-RCE Overview Proof-of-Concept exploit for CVE-2026-27574 – a critical code injection vulnerability CWE-94 in OneUptime BOpen Registration B -- CRegister New Accou...

-Spring4Shell-CVE-2022-22965-

-Spring4Shell-CVE-2022-22965-...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server The vulnerability could be exploited by injecting commands into the git push command as follows : git push -o '' origin master To review any exploitation of this vulnerability, we recommend th...

CVE-2025-60787

CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vulnerability I: Vulnerability Description ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. CVE-2021-40539 Zoho ManageEngine...

R2C-CVE-2025-55182-66478

🔥React2Shell Toolkit-CVE-2025-55182 & CVE-2025-66478 🚨 Critical RCE in React Server Components & Next.js 🚨 Professional Red Team Toolkit for CVE-2025-55182 Detection & Exploitation 🔍 Features • ⚡ Quick Start • 📚 Documentation • 🤝 Connect 🎯 About CVE-2025-55182 & CVE-2025-66478 🐛 What is...