CVE-2025-55182

CVE-2025-55182 Batch Detection Tool Efficient batch detection tool for the Next.js prototype pollution vulnerability CVE-2025-55182. Vulnerability Overview CVE-2025-55182 is a prototype pollution vulnerability in the Next.js framework. Attackers can exploit prototype pollution by crafting malicio...

MassExploit-CVE-2025-55182

CVE-2025-55182 – Massive Scanner PoC CVE-2025-55182 also referred to as “React2Shell” is a critical Remote Code Execution RCE vulnerability in the React Server Components RSC system. The issue occurs because the HTTP payload deserialization mechanism for “Server Functions” processes untrusted inp...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

jetty_9.4.31_CVE-2021-34428

Eclipse Jetty Canonical Repository This is the canonical repository for the Jetty project, feel free to fork and contribute now! Submitting a patch or pull request? Make sure you have an Eclipse Contributor Agreement ECA on file. eclipse.org/legal/ecafaq Project description Jetty is a lightweight...

Mobile-Drop-Device-SOC-Detection

🛡️ Project Phantom: Mobile "Drop Device" SOC Detection Simulation This project demonstrates an end-to-end SOC laboratory workshop simulating how an unauthorized, root-less Android device Casper Via S, used as a "Drop Device" within an internal network, is detected via Wazuh SIEM when launching...

react-server-cve-lab

React Server Components Security Lab CVE-2025-55183 & CVE-2025-55184 A comprehensive security testing environment for CVE-2025-55183 Source Code Exposure and CVE-2025-55184 Denial of Service vulnerabilities in React Server Components. ⚠️ Disclaimer FOR EDUCATIONAL AND SECURITY RESEARCH PURPOSES...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 is a hypothetical example, but let's assume it is a real-world vulnerability in the OpenSSH server implementation. This vulnerability could involve a buffer overflow or memory corruption issue that allows remote attackers to execute arbitrary code on the server. Here’s...

EUVD-2026-72915

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process...

EUVD-2026-72919

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...

EUVD-2026-72916

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

EUVD-2026-72917

MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually...

EUVD-2026-72954

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform...

EUVD-2026-72914

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

EUVD-2026-72913

A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypasse...

EUVD-2026-72955

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentiall...

EUVD-2026-72953

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. T...

EUVD-2026-72952

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

EUVD-2026-72948

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...

EUVD-2026-72951

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

EUVD-2026-72949

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...