vuln-app-CVE-2025-55182
zack0x01/vuln-app-cve-2025-55182Intentionally vulnerable Next.js application demonstrating CVE-2025-55182 RCE via unsafe deserialization in React Server Components. Includes exploit…
code-analysiseducationexploitation+5
22
zack0x01/vuln-app-cve-2025-55182Intentionally vulnerable Next.js application demonstrating CVE-2025-55182 RCE via unsafe deserialization in React Server Components. Includes exploit…
royaleybovich/cve-2026-3854-labLocal intentionally vulnerable lab with a guided workshop and CTF challenges for practicing Git push-option RCE, unsafe deserialization,…
nccgroup/rustproofing-linuxEducational examples porting Linux kernel vulnerabilities to Rust, featuring intentionally vulnerable code and exploits for learning kernel security…
zsolt-halo/log4j-log4shell-cve-2021-44228-spring-boot-test-serviceDockerized Spring Boot service intentionally vulnerable to Log4Shell (CVE-2021-44228) for testing detection tools, payloads, and exploit capabilities…
yougina/cve-2025-64459Intentionally vulnerable app for hands-on CVE-2025-64459 practice, enabling guided exploitation and vulnerability analysis in security training.
sharathc213/cve-2023-7172Intentionally vulnerable Hospital Management System demonstrating SQL injection (CVE-2023-7172) with Docker setup and PoC for educational security…
clickswave/vuln_appsRuns a fleet of intentionally vulnerable web/API apps in isolated Docker stacks for local penetration testing and validating scanner findings with…
cberman/cve-2023-2822-demoSimple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822.
fracturelabs/spring4shell_victimIntentionally vulnerable Spring app to test CVE-2022-22965
owasp/damn-vulnerable-ml-modelIntentionally vulnerable machine learning model for hands-on security training. Explore common ML vulnerabilities, adversarial attacks, and defensive…
sairbo/unihackers---cve-2025-55182-Intentionally vulnerable Next.js environment with PoC exploit and detection templates for CVE-2025-55182 (React2Shell RCE), enabling security testing…
machine-farmer/punchingbag-for-react2shellIntentionally vulnerable Next.js app for CVE-2025-55182 security research and CTF challenges
tulhan/commons-text-goatAn intentionally vulnerable webapp to get your hands dirty with CVE-2022-42889.
aaronm-sysdig/log4j-vuln-demoIntentionally vulnerable Log4j 2.14.1 demo for Sysdig CNAPP scanning (CVE-2021-44228)
subzer0x0/react2shellReact2Shell (CVE-2025-55182) – An intentionally vulnerable Next.js application created for educational and research purposes.
astraljays/traditionaljayIntentionally vulnerable VM-hosted Java shop — Log4Shell (CVE-2021-44228) workshop lab (EC2 / Azure VM / GCE)
abhirajranjan/cve-2025-66478Intentionally vulnerable Next.js environment for testing security scanners against CVE-2025-55182, with PoC exploit and detection guidance.
vladjrfhfg/react-site-cve-2025-55182Intentionally vulnerable Next.js corporate landing page demonstrating CVE-2025-55182, a JSON injection leading to RCE/SSRF via unsafe deserialization…