pocexploitCVE-2025-55182
[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used Perl's POSIX setuid(0) to escalate to root → read /root/flag.txt
Combined PoC for CVE-2025-28434 and CVE-2025-59528
Exploitation Silentium HTB-CTF
Firefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions
Found 200+ vulnerabilities on scanme.nmap.org including CVE-2023-38408 (9.8 critical)
CVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure
CVE-2025-58434 and CVE-2025-59528 chain POC
Vulnerability in NitroShare Desktop v0.3.4
Critical unauthenticated kill chain leading to full RCE in FlowiseAI (CVE-2025-58434 + CVE-2025-59528)
CVE-2025-58434 & CVE-2025-59528
CVE-2025-58434 and CVE-2025-59528 chain POC
CVE-2025-66024 - XWiki Blog Application home page vulnerable to Stored XSS via Post Title
Proof-of-concept exploit for CVE-2019-15107 (Webmin <= 1.920) enabling unauthenticated RCE via command injection.
Real-world incident response for CVE-2025-55182 (React2Shell) — script injection, server remediation, and post-incident report
CVE-2026-4350 - Perfmatters WordPress Arbitrary File Deletion
Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.
powerfull rust cve-2025-55182-scanner used for ctf & ethical purpose only