CVE-2025-55182
devianntsec/cve-2025-55182Master's thesis research on CVE-2025-55182 (React2Shell). Modular exploitation framework with 6 attack scenarios (RCE, exfiltration, defacement),…
educationexploitationexploit-frameworks+8
1
devianntsec/cve-2025-55182Master's thesis research on CVE-2025-55182 (React2Shell). Modular exploitation framework with 6 attack scenarios (RCE, exfiltration, defacement),…
reefspek/cocoapods-rce_cve-2024-38366Detailed analysis and exploit for a remote code execution vulnerability (CVE-2024-38366) in the CocoaPods Trunk Server, enabling OS command injection…
g4nkd/cve-2024-22120-rce-with-gopherThis exploit was created to exploit an XXE (XML External Entity). Through it, I read the backend code of the web service and found an endpoint where…
kljunowsky/cve-2023-36845Proof-of-concept exploit for CVE-2023-36845 enabling unauthenticated remote code execution on Juniper SRX firewalls and EX switches via PHP…
alt3kx/cve-2021-21985_pocPoC exploit and NSE scanner for CVE-2021-21985, a vCenter Server RCE vulnerability in the vSAN Health Check plugin, with manual exploitation steps…
verylazytech/cve-2024-23692Proof-of-concept exploit for unauthenticated remote code execution in Rejetto HTTP File Server (HFS) 2.3m (CVE-2024-23692). Includes target discovery…
mosaedh/cve-2022-32548-rce-pocPython-based proof-of-concept exploit for CVE-2022-32548, an unauthenticated remote code execution vulnerability in DrayTek routers via buffer…
nulltrace0x/cve-2025-31324Proof-of-concept exploit for CVE-2025-31324, a remote code execution vulnerability in SAP NetWeaver, with Shodan dorks for target discovery and…
bencodin/cve-2026-23918-pocProof-of-concept exploit for Apache mod_http2 double-free vulnerability (CVE-2026-23918) with recon, exploit, and RCE risk assessment phases.
zapstiko/cve-2025-3248Unauthenticated remote code execution exploit for Langflow applications vulnerable to CVE-2025-3248, targeting the /api/v1/validate/code endpoint…
squ4nch/cve-2015-3224Node.js exploit for CVE-2015-3224, achieving unauthenticated RCE on Rails web-console by spoofing X-Forwarded-For to bypass IP whitelist and…
lpyydxs/cve-2021-40539Exploit for CVE-2021-40539: RCE in Zoho ManageEngine ADSelfService Plus. Includes detection script, Fofa search syntax, and webshell deployment for…
lpyzds/cve-2021-40539Exploit for CVE-2021-40539 targeting Zoho ManageEngine ADSelfService Plus RCE with authentication bypass. Includes batch scanning and webshell…
inspiringz/cve-2021-22205GitLab CE/EE pre-auth RCE exploit via ExifTool with version detection, reverse shell, SSH key injection, and password modification.
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
freerdp/freerdpFree implementation of Remote Desktop Protocol (RDP) providing client and library for secure remote desktop access with authentication, encryption,…
openvpn/openvpnSecure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…