[POC] CVE-2025-55182 — mysticalhearts.github.ioDec 28, 2025
pocexploitCVE-2025-55182
🛠️ Exploit CVE-2025-55182 in Next.js with an interactive shell for security testing on authorized targets. Use responsibly for effective vulnerability assessment.
🛠️ Detect and exploit CVE-2025-55182 vulnerabilities in Next.js applications with this easy-to-use command-line scanner.
script to help solve the lab on hackviser covering (CVE-2025-55182)
CVE-2025-32462 is a local privilege escalation vulnerability in sudo
This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.
🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.
PoC for CVE-2025-65945 (Improper Verification of Cryptographic Signature in node-jws)
Xiongmai XM530 IP Camera ONVIF Complete Authentication Bypass
Xiongmai XM530 IP Camera Hardcoded RTSP Credentials Exposure
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability."
CVE-2022-0492
Denial of Service Vulnerability in Plesk Obsidian via `get_password.php`
Exploit PoCs for MARMALDE 2 (CVE-2025-67780) vulnerability in Starlink Dishes
CVE-2025-65427: Missing rate limiting in Dbit N300 T1 Pro router login API allows brute-force attacks
Insecure attachment handling when using Canary Mail or Blue mail
Reverse engineering research and custom firmware for the Allwinner V3-based SJCAM SJ4000 Air, including firmware parsers, an AVIOCTRL client, security research, and the CVE-2026-52656 proof of concept.
Path traversal tool based on cve-2025-8088