Catálogo de exploits

open-flaw/CVE-2025-55182

Detection for CVE-2025-68461

Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'

React2Shell Vulnerability Verification Script (React2Shell also known as CVE-2025-55182).

Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.

Proof of Concept for Authenticated RCE in Crafty Controller

cyberok-org/CVE-2025-67887

This is a Proof-Of-Concept of CVE-2025-63353

CVE-2025-40602 is a local privilege escalation vulnerability in the appliance management console (AMC) of SonicWall Secure Mobile Access (SMA) 1000 series appliances.

This repo describes about cve-2021-29447 and a small script for exploiting automatically

Detection for CVE-2025-37164

Bitrix24 <= 25.100.300 (Translate Module) Remote Code Execution Vulnerability

React2Shell (CVE-2025-66478): A Python-based Proof of Concept for Critical Remote Code Execution (RCE) in Next.js Server Components. Features an interactive CLI, custom payload injection, and cleaner output formatting. For educational research only.

rashedhasan090/cve-2025-55182-mitigator

1C-Bitrix <= 25.100.500 (Translate Module) Remote Code Execution Vulnerability

Control Web Panel <= 0.9.8.1208 (admin/index.php) OS Command Injection Vulnerability • Software Link:

Detection for CVE-2025-40602

POC for CVE-2025-33053 WebDav Exploit, demonstrating how the vulnerability can be triggered in a real environment. This repository focuses on hands-on exploitation steps, reproducible test cases, and observable impact, helping security researchers and defenders understand the issue and validate fixes.

Cisco is aware of a potential vulnerability.&nbsp; Cisco is currently investigating and&nbsp;will update these details as appropriate&nbsp;as more information becomes available.

KingHacker353/CVE-2025-20393

Script to detect CVE-2025-20393 for Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

Proof-of-Concept exploit for CVE-2025-14174 (EUVD-2025-203113) - Memory corruption in ANGLE allowing out-of-bounds access and RCE in web browsers. Reliable on iOS/Android/Windows, including patched systems with incomplete fixes.

Proof-of-concept research tool for CVE-2025-55182, a critical unauthenticated RCE in Next.js App Router caused by server-side object injection in React Server Components and Server Actions, including UTF-16LE WAF evasion techniques.

Fortinet announced two closely related authentication‑bypass vulnerabilities on 9 December 2025. Both flaws involve improper verification of cryptographic signatures (CWE‑347) in the handling of SAML responses for the FortiCloud SSO login feature.

proof-of-concept mass scanner targeting JetBrains TeamCity instances affected by CVE-2024-27198

React2shell vulnerable lab (CVE-2025-55182)

Improved poc of CVE-2017-0785 on DS-MDP002

Proof of Concept for Authenticated RCE in Crafty Controller <= 4.6.1

An advanced vulnerability scanner for detecting **CVE-2025-55182** and **CVE-2025-66478** - critical Remote Code Execution (RCE) vulnerabilities in Next.js applications using React Server Components (RSC).

React2Shell Exploitation Tool (CVE-2025-55182)