374489 matches found
CVE-2025-55182-Scanner
CVE-2025-55182 Hybrid Security Scanner A professional, hybrid security scanner designed to bridge static analysis and dynamic exploitation capabilities for CVE-2025-55182. This tool serves both developers shift-left security and security professionals production testing. Features Static Analysis ...
Havoc-C2-SSRF-poc
CVE-2024-41570: Havoc-C2-SSRF-poc This vulnerability is exploited by spoofing a demon agent registration and checkins to open a TCP socket on the teamserver and read/write data from it. This allows attackers to leak origin IPs of teamservers and much more. Full analysis:...
SMBGhost
SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...
CVE-2026-11561
CVE-2026-11561 — Apinizer SSTI / RCE Version Check Infra Nuclei template to detect Apinizer versions lower than 2026.04.6, which are vulnerable to CVE-2026-11561 Server-Side Template Injection leading to Remote Code Execution, CVSS 9.8. Usage echo | nuclei -t CVE-2026-11561.yaml How it works 1...
brook
Brook A cross-platform programmable network tool. Sponsor : Shiliew - Focuses on providing stable network services Server bash You may want to use brook link to customize some parameters Docs https://www.txthinking.com/brook.html Brook Script Gallery https://brook.app...
CVE-2025-55182-React2Shell-RCE
CVE-2025-55182 – React2Shell RCE GUI A modern, neon-themed GUI tool for security testing React2Shell CVE-2025-55182 on React Server Components / Next.js applications. Built with Python + CustomTkinter , it lets you: Check if a specific endpoint is vulnerable to React2Shell Run shell commands on...
shocker
Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...
react2shellexploitvisualized
React2Shell CVE-2025-55182 Visualization An interactive educational visualization explaining the React2Shell vulnerability - a critical CVSS 10.0 remote code execution flaw in React Server Components. What This Is A 5-step narrated walkthrough that explains: 1. Traditional SSR - How server-side...
anti-jndi
anti-jndi Fun things against the abuse of the recent CVE-2021-44228 Log4Shell vulnerability using common web servers. Based on the post by @shipilev https://gist.github.com/shipilev/92e709a868f3d328b6636e1bfc21cf09 I ported his example to Apache2. A coworker did it for Lighttpd. I decided to make...
CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti
TREX-MES-Uygulamalarında-SQLi-Zafiyeti CVE-2026-18782 Genel Bakış TREX MES, üretim sahasından veri toplamak ve yönetmek için kullanılan ticari bir Üretim Yürütme Sistemi MES / Endüstri 4.0 platformudur. Uygulamanın web API'si, istemciden gelen sql parametresi doğrudan arka uçtaki Microsoft SQL...
CVE-2022-36234
Description of CVE-2022-36234 SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets. Triggering the double free will allow clients to crash any SimpleNetwork TCP server remotely. In...
CVE-2026-101779
A flaw was found in the MySQL Server Telemetry component. A remote attacker with high privileges and network access can exploit this vulnerability over multiple protocols to cause a partial Denial of Service DoS. Successful exploitation can lead to unauthorized degradation of database service...
CLEANSTART-2026-OB67421 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...
cve-mcp-server
🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...
CVE-2025-55182
CVE-2025-55182 Next.js RCE Reproduction Guide Disclaimer ⚠️ This tool is for security research and educational purposes only. Do not use it for illegal activities. ⚠️ Vulnerability Overview CVE-2025-55182 is a critical remote code execution RCE vulnerability in the Next.js framework. This...
dump1090
Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...
Remediating-CVE-2013-3900-EnableCertPaddingCheck-
Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...
BirDuster
BirDuster About BirDuster is a Python based knockoff of the original DirBuster. BirDuster is a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation...
CVE-2022-23884
CVE-2022-23884 There is a network-layer vulnerabilities in the official server of Minecraft: Bedrock Edition aka Bedrock Server,which allow attacker to launch a DoS attack. CVE-2022-23884 Mojang Bedrock Dedicated Server 1.16.0-1.18.12 is affected by an large loop and crash server caused by...