Exploits

REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch scanning with custom input, structured payload handling, and clear CLI output.

dol_eval_standard() whitelist bypass eval() RCE, affecting Dolibarr 23.0.0 and below by jiva (jivasecurity.com)

Proof-of-concept for CVE-2025-55182 (React2Shell): unauthenticated RCE in React Server Components / Next.js via Flight protocol deserialization.

Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US 64/006,746)

The script performs a full Telnet negotiation mirroring the exact byte sequence of a real telnet -a client session.

cve-2026-29000 exploit

Modernized ProxyShell Exploit (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207)

Exploit script for cve-2025-15467

MotionEye v0.43.1b4 OS Command Injection

CVE-2025-66866

CVE-2026-3442

CVE-2026-29000 - pac4j-jwt Authentication Bypass PoC

Basic Proof of Concept (Poc) Exploit for React RSC - CVE-2025-55182

PoC of CVE-2026-102607 ZoneMinder <= 1.38.1

CVE-2025-66398 — Signal K Server ≤ 2.18.0 RCE PoC

Professional PoC for CVE-2025-59536 and related CVEs. Demonstrates an MCP Tool Confirmation Prompt Misrepresentation in Anthropic Claude_Code leading to arbitrary OS command execution.

CVE-2026-24061

Easy Grade Pro 4.1 file parsing bug used as an educational example to show how beginners can start vulnerability research through reverse engineering.