Lucene search
K

8324 matches found

CNNVD
CNNVD
added 2025/12/16 12:0 a.m.3 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds write when parsing a specially crafted MODEL file, which could result in a crash, data corruption, or execution of arbitrary code in the...

7.8CVSS7.4AI score0.00028EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.2 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds write when parsing a specially crafted CATPART file, which could result in a crash, data corruption, or execution of arbitrary code in the...

7.8CVSS7.4AI score0.00028EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.3 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted SLDPRT file, which could result in a crash, read sensitive data, or execute arbitrary code...

7.8CVSS7AI score0.00028EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/15 11:12 p.m.10 views

Security Bulletin: QRadar Suite Software includes components with a known vulnerability

Summary QRadar Suite Software includes components with a known vulnerability in React Server Components. This has been addressed in the update. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versio...

10CVSS7.8AI score0.82011EPSS
Exploits365Affected Software1
Github Security Blog
Github Security Blog
added 2025/12/15 10:0 p.m.10 views

Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versions

Withdrawn Advisory This advisory has been withdrawn because LikeC4 isn’t impacted by CVE-2025-55182 because it doesn’t ship React. React is a peer dependency. Original Description LikeC4 uses React and Next.js: which contain known RCE vulnerabilities, as seen in CVE-2025-55182. 2025-12-15 Edit: t...

10CVSS7AI score0.82011EPSS
Exploits365References5Affected Software1
GithubExploit
GithubExploit
added 2025/12/15 9:1 p.m.129 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ W...

10CVSS7.7AI score0.82011EPSS
Exploits365
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/15 8:41 p.m.9 views

Security Bulletin: IBM Concert is vulnerable to remote code execution due to React (CVE-2025-55182)

Summary IBM Concert uses React which is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

10CVSS8.2AI score0.82011EPSS
Exploits365Affected Software1
Microsoft Secure
Microsoft Secure
added 2025/12/15 7:35 p.m.11 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.9AI score0.82011EPSS
Exploits379
Microsoft Secure
Microsoft Secure
added 2025/12/15 7:35 p.m.7 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.6AI score0.82011EPSS
Exploits379
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2025/12/15 2:48 p.m.16 views

[R2] Nessus Versions 10.11.1 and 10.9.6 Fix Multiple Vulnerabilities

R2 Nessus Versions 10.11.1 and 10.9.6 Fix Multiple Vulnerabilities Arnie Cabral Mon, 12/15/2025 - 09:48 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components expat, libxml2, libxslt were found to contain vulnerabilities, and updated...

7.3AI score
Exploits0
GithubExploit
GithubExploit
added 2025/12/15 10:50 a.m.207 views

Exploit for CVE-2025-55183

React Server Components 취약점 테스트 React Server Components RSC...

7.5CVSS6.8AI score0.41239EPSS
Exploits13
GithubExploit
GithubExploit
added 2025/12/15 10:32 a.m.166 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React Server Components RCE NOTE: Written b...

10CVSS7.7AI score0.82011EPSS
Exploits379
RedhatCVE
RedhatCVE
added 2025/12/15 8:25 a.m.7 views

CVE-2025-55183

A flaw was found in React Server Components RSC. This vulnerability allows an information leak, where a specifically crafted HTTP Hypertext Transfer Protocol request to a vulnerable Server Function can unsafely return its source code. Exploitation requires a Server Function that explicitly or...

5.3CVSS6.5AI score0.26306EPSS
Exploits7References5
RedhatCVE
RedhatCVE
added 2025/12/15 8:3 a.m.6 views

CVE-2025-67779

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS6.3AI score0.41239EPSS
Exploits10References5
RedhatCVE
RedhatCVE
added 2025/12/15 8:3 a.m.8 views

CVE-2025-55184

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS6.5AI score0.41239EPSS
Exploits10References5
GithubExploit
GithubExploit
added 2025/12/15 7:35 a.m.170 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Workin...

10CVSS8.4AI score0.82011EPSS
Exploits365
Broadcom
Broadcom
added 2025/12/15 12:0 a.m.18 views

unauthenticated remote code execution vulnerability in React Server Components. React (CVE-2025-55182), Next.js (CVE-2025-66478).

CVE-2025-55182 Description: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable co...

10CVSS7.9AI score0.82011EPSS
Exploits379
GithubExploit
GithubExploit
added 2025/12/14 5:18 p.m.168 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.Js React Server Components RSC Vulnerabilities This re...

10CVSS8.8AI score0.82011EPSS
Exploits375
GithubExploit
GithubExploit
added 2025/12/14 2:24 p.m.131 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner – with PoC CVE-2025-55182 – React Ser...

10CVSS7.2AI score0.82011EPSS
Exploits379
GithubExploit
GithubExploit
added 2025/12/14 12:59 p.m.122 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner 🚀 !Bashhttps://img.shields...

10CVSS7.9AI score0.82011EPSS
Exploits365
Rows per page
Query Builder