CVE-2025-55182-scanner

RSC Surface & Crash Detector This tool is a non-intrusive security detection script designed to identify exposed React Server Components RSC surfaces and verify crash-based vulnerability behavior related to: CVE-2025-55182 CVE-2025-66478 It is intended for defensive security testing, WAF...

CVE-2025-55182

CVE-2025-55182 React2Shell Analysis Report Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required 1.1. Dockerfile Required This environment uses a custom Dockerfile based on the official Node.js Alpine image. FROM node:20-alpine WORKDIR /app COPY...

React2Shell-CVE-Lab

⚛️ React2Shell: Laboratorio Vulnerable CVE-2025-55182 ⚠️ ADVERTENCIA: APLICACIÓN INTENCIONALMENTE VULNERABLE Este repositorio contiene una aplicación Dockerizada configurada específicamente para ser vulnerable a CVE-2025-55182 React2Shell. NO implemente este contenedor en un entorno de producción o...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage go run main.go -t -c Examples go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t http://127.0.0.1 -c "cat /etc/passwd"...

CVE-2025-55182-Simple-Scanner-main

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...

CVE-2025-55182

React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...

CVE-2025-55182

CVE-2025-55182 React2Shell CVE-2025-55182 React RCE Test Program 🔒 CVE-2025-55182 Interactive RCE Scanner This script is a vulnerability verification tool targeting CVE-2025-55182, a critical remote code execution RCE vulnerability in React 19.x's React Server Components RSC . This tool determine...

CVE-2025-55182

CVE-2025-55182 — React Server Components Unauthenticated RCE Severity: Critical — CVSS 10.0 CWE: CWE-502 Deserialization of Untrusted Data Vendor: Meta Facebook Disclosed: December 3, 2025 Overview CVE-2025-55182 is a maximum-severity unauthenticated remote code execution RCE vulnerability in Rea...

CVE-2025-55182

CVE-2025-55182: React Server Components Unsafe Deserialization Vulnerability Overview CVE-2025-55182 also known as React2Shell is a critical unsafe deserialization vulnerability discovered in the React Flight Protocol, affecting the payload of React Server Components RSC. This vulnerability resid...

react2shelldemo

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ WARNING This repository is for educational and defensive security research only. Do NOT attempt to run this code against: Production systems Public websites Servers you do not own or have explicit permission to test Unauthorized exploitation...

Bot-exploit-CVE-2025-55182

React2Shell Scanner – CVE-2025-55182 🔐 Educational tool for detection of vulnerability CVE-2025-55182 React2Shell in applications that use React Server Components / Next.js. 📌 About CVE-2025-55182 CVE-2025-55182 , known as React2Shell , is a critical vulnerability affecting React Server Component...

CVE-2025-55182-POC-SCANNER

CVE-2025-55182: Critical Pre-Authentication RCE in React Server Components Security Research byschema.cx "Control is an illusion. It's the systems we build that control us—unless we understand them first." 📋 Table of Contents Disclaimer & Legal Notice Executive Summary Technical Description...

CVE-2025-55182

React2Shell Ultimate Scanner Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-55182 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-55182 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Server...

CVE-2025-55182-Exploit

CVE-2025-55182 – React Server Components RCE Exploit ⚠️ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...

CVE-2026-21509

CVE-2026-21509 — Microsoft Office OLE Security-Feature Bypass Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here for an actively exploited vulnerability. A security-feature bypass in Microsoft Office that lets a crafted document load COM...

CVE-2025-55182-Simple-Scanner

CVE-2025-55182: React Server Components RCE Scanner A comprehensive toolkit for detecting and exploiting CVE-2025-55182 , a Critical Remote Code Execution vulnerability in Next.js applications using React Server Components. This repository features a unified Bash scanner Single & Mass mode,...

PoC_CVE-2025-55182

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-concept tool for demonstrating the critical React2Shell vulnerability CVE-2025-55182 / CVE-2025-66478 on authorized, local testing environments only. ⚠️ CRITICAL WARNING: ACTIVE EXPLOITATION This vulnerability CVSS 10.0 is being actively...

cve-2025-55182-mitigator

cve-2025-55182-mitigator Defensive scanner + mitigation guidance for CVE-2025-55182 React Server Components / Flight protocol insecure deserialization. This tool is intended to help you: identify repos that are likely vulnerable based on dependency versions quickly apply the definitive mitigation...

CVE-2025-55182

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182. For educational and authorized testing only. Features Root-cause writeup, visuals, and lab: see React2ShellDeconstructingaPerfect10RCE.pdf and the attack-path...