Disclosure for CVE-2025-9886 and CVE-2025-9952. Contribute to MooseLoveti/Trinity-Audio-CVE-Report2 development by creating an account on GitHub.

企业会议室预定管理系统 java springboot ssm mysql (源代码+数据库+配套论文+ppt) 角色：管理员、用户 管理员：管理员进入主页面，主要功能包括对员工、会议室、分类、会议预定、会议通知、会议资料、会议投票、投票记录、员工考勤、通知公告、意见收集、设备报修、轮播图管理、用户信息等进行操作。 系统首页 、会议室 、会议资料 、会议投票、通知公告、修改密码、会议预定...

Smart RCE Hackathon 2026 - Web Platform. Contribute to DrTMUSHACoder/Smart-RCE-Hackathon-2026-Website development by creating an account on GitHub.

AURORA is a strictly non-exploitative, evidence-driven reconnaissance framework designed to detect historic Java and Node.js RCE chains with high confidence. Unlike traditional scanners, AURORA foc...

A critical Remote Code Execution (RCE) vulnerability has been identified in PluXML CMS version 5.8.22. This vulnerability allows authenticated administrators to execute arbitrary PHP code on the we...

CVE-2025-55182 React2Shell PoC - Critical RCE in React Server Components / Next.js. CVSS 10.0. Error-based exfil, reverse shell, interactive mode. - p3ta00/react2shell-poc

Contact Form Injection -> RCE -> Account Take Over - Abenezer-A/Abenezer_Alemayehu_AXUMxINSA_Challenge

A self-hosted vulnerable Next.js environment running on Docker for simulating CVE-2025-55182. Built for educational security research and CTF practice. - xxxTectationxxx/React2Shell-CVE-Lab

🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders. - Markusino488/cve-2025-8088

Interactive RCE Pseudo-Shell Tool. Contribute to danielorlando97/iwshell development by creating an account on GitHub.

Contact Form Injection -> RCE -> Account Take Over - Abenezer-A/Project-11---Contact-Form-Injection

一个自托管的 XSS 协作平台，用于 Web 安全研究、教育演示以及授权的渗透测试。支持 XSS 回传数据收集、Payload 管理、Web 后台管理。 - shaoyu521/xss-platform

AI渗透测试平台-Web漏洞设计及安全演示系统. Contribute to Austain257/AI-Penetration-Testing-Platform development by creating an account on GitHub.

writeups for (CVE-2025-67586, CVE-2025-67985, CVE-2025-67986) - r0xtsec/CVE

CTF de Seguridad en Bases de Datos (URJC): retos SQL Injection, blind/time-based, RCE con INTO OUTFILE - juansrz/dbsec-P2-ctf

Secure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can neutralize a critical Next.js/React Server Actions RCE (...

Here is the CVE-2025-65817. Contribute to Istaarkk/CVE-2025-65817 development by creating an account on GitHub.

OpsGuard eliminates the "3 AM PagerDuty" nightmare, specifically protecting against threats like the recent CVE-2025-55184 (Next.js DoS) - shubham-01-star/OpsGuard-simulation

A Python-based security scanner for detecting and exploiting **React Server Components (RSC)** vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, ...