{"uuid": "900ab06c-ad1b-4602-a898-d3478f913b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66478", "type": "published-proof-of-concept", "source": "https://t.me/NinjaSecurity/239", "content": "RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)\n\nhttps://github.com/orwagodfather/react2shell-scanner\n\nMycroft is a Offline File Analyzer and Metadata Scraper\n\nhttps://github.com/Lucksi/Mycroft\n\nH0tmCheck: email checking sin ruido, sin basura, solo resultados\n\nhttps://github.com/Dsigala/H0tmCheck\n\nWordpress based bug bounty resources\n\nhttps://github.com/aashifm1/WordPress-BugBounty\n\nBloodSOCer is a Python automation tool that aggregates threat intelligence data from multiple sources (Mitre ATT&CK, Sigma rules, Atomic Red Team) and produces JSON files to ingest in BloodHound in OpenGraph format. BloodSOCer can also upload the files to BloodHound and set the icons for the custom objects if it has API Tokens defined in the configuration. Security analysts can then visualize the data from any angle, and a few Cypher queries are provided to help you get started\n\nhttps://github.com/Scoubi/BloodSOCer\n\nA sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11\n\nhttps://github.com/shotgunner101/Sysmon-LOLRMM\n\nPlease Note: All mentioned tools are listed for educational purposes and authorized security testing only. Unauthorized use on systems you do not own or have explicit permission to test is illegal and unethical.\n\n#NinjaSecurity #HackersFactory", "creation_timestamp": "2026-08-20T00:00:09.098876Z"}