multi

package

v0.3.0 Latest Latest Go to latest Published: Mar 3, 2026 License: AGPL-3.0 Imports: 1 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Langflow struct{ sdk.Pik }

Langflow exploits pre-auth RCE in Langflow's /api/v1/validate/code endpoint. Python exec via decorator injection (CVE-2025-3248).

func (m *Langflow) Check(run *sdk.Context) (sdk.CheckResult, error)

func (m *Langflow) Exploit(run *sdk.Context) error

func (m *Langflow) Info() sdk.Info

type React2Shell struct{ sdk.Pik }

React2Shell exploits CVE-2025-55182: pre-auth RCE in React Server Components via Flight protocol deserialization and prototype pollution.

func (m *React2Shell) Check(run *sdk.Context) (sdk.CheckResult, error)

func (m *React2Shell) Exploit(run *sdk.Context) error

func (m *React2Shell) Info() sdk.Info