Catálogo de exploits

Bitrix24 <= 25.100.300 (Translate Module) Remote Code Execution Vulnerability

Detection for CVE-2025-40602

Detection for CVE-2025-37164

Script to detect CVE-2025-20393 for Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

KingHacker353/CVE-2025-20393

CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console (AMC) of SonicWall Secure Mobile Access (SMA) 1000 series appliances.

Improved poc of CVE-2017-0785 on DS-MDP002

Proof of Concept for Authenticated RCE in Crafty Controller <= 4.6.1

proof-of-concept mass scanner targeting JetBrains TeamCity instances affected by CVE-2024-27198

Proof-of-concept research tool for CVE-2025-55182, a critical unauthenticated RCE in Next.js App Router caused by server-side object injection in React Server Components and Server Actions, including UTF-16LE WAF evasion techniques.

Fortinet announced two closely related authentication‑bypass vulnerabilities on 9 December 2025. Both flaws involve improper verification of cryptographic signatures (CWE‑347) in the handling of SAML responses for the FortiCloud SSO login feature.

React2shell vulnerable lab (CVE-2025-55182)

CVE-2022-0492

試してみるよん

React2Shell Exploitation Tool (CVE-2025-55182)

React2Shell

S-Mughal/NextJS-app-CVE-2025-55182

lytianahkone-boop/cve-2025-25257

This repository documents three security vulnerabilities discovered in FreePBX (CVE-2025-66039, CVE-2025-61678, CVE-2025-61675), including analysis, impact, and proof-of-concept details for security research and awareness purposes.

d0cnull/nextjs-CVE-2025-55182

Quyida to‘liq LAB rejasi: demo-vulnerable app → Python PoC → Metasploit exploit skeleton

CVE-1999-0678- /doc directory browsable

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability."

This is a python PoC scripts for CVE-2025-24071 which is a vulnerability in Windows File Explorer that allows unauthorized access to sensitive information like NTLM Exposure.

An advanced vulnerability scanner for detecting **CVE-2025-55182** and **CVE-2025-66478** - critical Remote Code Execution (RCE) vulnerabilities in Next.js applications using React Server Components (RSC).

A proof-of-concept tool for demonstrating the critical React2Shell vulnerability

This repo contains the scripts you can execute to simulate the (CVE-2025-55182) along with next.js server

hulh122/CVE-2025-55182

This project provides a fully functional demonstration of CVE-2025-55182 (React2Shell) - a critical Remote Code Execution vulnerability in React Server Components and Next.js.

yasa