pvharmo2/gha-lab-51c6b6d0a0

PoC

Lab reproducing CVE-2025-67727 (parse-community/parse-server ci-performance.yml pull_request_target RCE at e78e58d) — authorized security research

view exploit source poc_in_githubauthor pvharmo2published 2026-09-04catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-67727US	critical9.8	0.42% (36th)	Exploit	2025-12-12
Parse Server is an open source backend that can be deployed to any infrastructure that runs Node.js. In versions prior to 8.6.0-alpha.2, a GitHub CI workflow is triggered in a way…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.