CVE-2025-55182-PoC

⚡ React2Shell Exploit PoC CVE-2025-66478 Next.js Remote Code Execution RCE via Prototype Pollution in Server Components 🕵️‍♂️ Overview This repository contains a Proof of Concept PoC for CVE-2025-66478 also referenced as CVE-2025-55182 in some contexts, a critical vulnerability affecting Next.js...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...

CVE-2025-55182-POC-NEXTJS

CVE-2025-55182 React2Shell - Proof of Concept PoC This is a commercial, non-free Proof-of-Concept. Purchase Link: https://bit.ly/44G0ani Overview This repository contains a reliable, high-fidelity Proof-of-Concept PoC exploit for CVE-2025-55182 , also known as React2Shell. This is a critical CVSS...

react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478

🔍 Phoenix SCA Scanner - Universal - Version for CVE-2025-55182-CVE-2025-66478 React and Nexus Vulnerability EXTERNAL Vulnerability for React2Shell class of bugs: two freshly disclosed, unauthenticated remote code execution vulnerabilities in the React Server Components RSC "Flight"...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications 🎯 Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

CVE-2025-55182-scanner

React Server Components Surface Exposure Scanner CVE-2025-55182 A specialized, non-intrusive surface detector for CVE-2025-55182 React Server Components RCE. ⚠️ Critical Technical Context Read this before scanning: While CVE-2025-55182 is a critical RCE vulnerability CVSS 10.0, real-world...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ⚡ React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ⏩ TL;...

RSC_Detector

Detector de Huellas RSC Una extensión de Chrome para detectar huellas de React Server Components RSC y el App Router de Next.js en páginas web. ⚠️ Aviso Importante Esta extensión está diseñada únicamente con fines educativos y de investigación en seguridad. Incluye funcionalidades que podrían...

mitigate-cve-2026-23869-react-server-component-loops

Cómo Solucionar CVE-2026-23869: Mitigar los Bucles de Componentes de Servidor de React Asegurar las aplicaciones frontend empresariales modernas requiere un monitoreo continuo de los diseños de obtención de datos del lado del servidor y de los ciclos de vida de los componentes del framework. Con ...

CVE-2025-55182

Exploit RCE de Next.js React Server Components Explota la CVE-2025-55182 para ejecución remota de código mediante contaminación de prototipos. Instalación root@kitploit: uv sync Uso Ejecución de comandos root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id"...

Next.js_exploit_CVE-2024-34351

csr-rsc-ssg-isr-ssr-ssrf This repo can be used as support to present one or more meetups. The path is as follows... "CSR" Client Side Rendering: React as a standard SPA library "RSC" React Server Components: execution of React components only on the server side "SSG" Static Site Generation:...

aura-inspector

aura-inspector This is not an officially supported Google product. This project is not eligible for the Google Open Source Software Vulnerability Rewards Program. Introduction aura-inspector is a Swiss Army knife of Salesforce Experience Cloud testing. It facilitates in discovering misconfigured...

WEB-CLI_RCE_React2Shell

REACT2SHELL 🎯 Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...

CVE-2025-55182-Scanner

CVE-2025-55182 - React Server Components RCE Scanner A comprehensive security testing toolkit for CVE-2025-55182, a critical pre-authentication remote code execution vulnerability in React Server Components. 🎓 NEW: Complete Educational Guide Available! Want to understand this vulnerability 100%? ...

React2Shell-PoC-CVE-2025-55182

Simulación de explotación de React2Shell CVE-2025-55182 Nota: Este documento es solo para fines educativos y de investigación en seguridad. No lo utilices para atacar sistemas sin autorización. 1. Resumen CVE-2025-55182, también conocida como React2Shell, es una vulnerabilidad grave de ejecución...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 RCE and CVE-2025-55183 Source Code Disclosure in Next.js React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

ROOT-APP-MAVEN-CVE-2026-54399 CVE-2026-54399 in org.apache.httpcomponents.core5:httpcore5 - Patched by Root

Root has patched CVE-2026-54399 in the org.apache.httpcomponents.core5:httpcore5 package for Root:Maven. Multiple fixed versions available...

react2shell-toolkit

Kit de evaluación de RCE de Next.js Un kit de herramientas en Python para validar e investigar CVE-2025-55182, también conocido como React2Shell , en entornos autorizados. La vulnerabilidad afecta a los React Server Components y puede exponer aplicaciones construidas con frameworks como Next.js a...

react2shell-scanner

react2shell-scanner Una herramienta de línea de comandos para detectar CVE-2025-55182 y CVE-2025-66478 en aplicaciones Next.js que utilizan React Server Components. Para conocer los detalles técnicos de la vulnerabilidad y la metodología de detección, consulta nuestra entrada del blog:...