[POC] CVE-2025-55182 — mysticalhearts.github.ioDec 28, 2025
pocexploitCVE-2025-55182
🛠️ Exploit CVE-2025-55182 in Next.js with an interactive shell for security testing on authorized targets. Use responsibly for effective vulnerability assessment.
🛠️ Detect and exploit CVE-2025-55182 vulnerabilities in Next.js applications with this easy-to-use command-line scanner.
script to help solve the lab on hackviser covering (CVE-2025-55182)
CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE 0day Finder Quick
CVE-2025-32462 is a local privilege escalation vulnerability in sudo
A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025
This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.
🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.
PoC & Write-up for CVE-2025-68434: Critical CSRF in OpenSourcePOS. Exploits a disabled filter configuration to allow unauthenticated attackers to silently create rogue Administrator accounts, leading to full system takeover. Validated on versions < 3.4.0.
PoC repository for CVE-2025-68147: Stored Cross-Site Scripting (XSS) in OpenSourcePOS. Vulnerability allows privilege escalation via malicious JavaScript injection in the Store Config module. Includes payload details and patch verification (v3.4.0). Security Researcher: Aditya Singh (Nixon-H).
PoC for CVE-2025-65945 (Improper Verification of Cryptographic Signature in node-jws)
Xiongmai XM530 IP Camera ONVIF Complete Authentication Bypass
Xiongmai XM530 IP Camera Hardcoded RTSP Credentials Exposure
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability."
CVE-2022-0492
Denial of Service Vulnerability in Plesk Obsidian via `get_password.php`
Exploit PoCs for MARMALDE 2 (CVE-2025-67780) vulnerability in Starlink Dishes