CVE-2025-67303

This repository contains a functional exploit PoC for CVE-2025-67303, demonstrating a command injection vulnerability in a simulated ComfyUI Manager service. The vulnerable endpoint `/run` reads and executes commands from a user-controlled configuration file, enabling remote code execution.

This repository contains a PoC exploit for CVE-2025-67303, targeting a command injection vulnerability in ComfyUI Manager. The exploit includes a web endpoint that executes arbitrary commands and an install script that starts a reverse shell via netcat.

The repository contains only a PowerShell script that pings a domain and a minimal README. No functional exploit code or details about the vulnerability are provided.

The repository claims to be a PoC for CVE-2025-67303 but contains malicious code disguised as a legitimate AI enhancement node for ComfyUI. It executes a PowerShell reverse shell and a Python-based reverse shell during installation, with no clear relation to the stated vulnerability.

The repository contains a trivial PowerShell script that only launches the calculator. No exploit logic or vulnerability details are present.