CVE-2025-55182-poc

CVE-2025-55182 React Flight protocol vulnerability allowing prototype chain traversal via chunk references. Testing against bullshit-react-project. Detection This is slightly out of date as the real PoC has now been revealed. Vite RSC : bash ./vite-detect.sh https://example.com Next.js : bash...

CVE-2025-61229

CVE-2025-61229 Description From the developer's blog: User-settable Before/After shell scripts run escalated, with SuperDuper's TCC Full Disk Access permissions. Since those shell scripts are referenced by the settings files for the copy or schedule, a malicious actor could modify those settings ...

CVE-2025-55182

CVE-2025-55182 Original author:https://github.com/msanft/CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Backgrou...

CVE-2025-55182-research

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

CVE-2025-55182-exp

CVE-2025-55182-exp 🔥 Overview CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting Next.js applications using App Router with Server Actions. The vulnerability exists in the Flight protocol deserialization process, allowing attackers to...

agentwatch

agentwatch A flight recorder for Claude Code sessions. You let Claude Code run on your machine — sometimes for hours, sometimes with auto-approve. agentwatch silently logs every action, so you can come back and see exactly what happened. root@kitploit: npm install -g agentwatch-dev agentwatch...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Next.js Remote Code Execution RCE PoC Critical vulnerability in Next.js Server Actions allowing unauthenticated Remote Code Execution via React Flight Protocol deserialization Overview This repository contains a Proof of Concept PoC for the critical R...

R2C-CVE-2025-55182-66478

🔥React2Shell Toolkit-CVE-2025-55182 & CVE-2025-66478 🚨 Critical RCE in React Server Components & Next.js 🚨 Professional Red Team Toolkit for CVE-2025-55182 Detection & Exploitation 🔍 Features • ⚡ Quick Start • 📚 Documentation • 🤝 Connect 🎯 About CVE-2025-55182 & CVE-2025-66478 🐛 What is...

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

react2shell

React2Shell: RCE 0-day in React Server Components CVE-2025-55182 React and CVE-2025-66478 Next.js This repository contains exploit code for authorized security testing and educational purposes only. See also: Multiple researchers have published analyses of this vulnerability. Check the References...

CVE-2025-55182

CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions1, which can be seen as...

react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478

🔍 Phoenix SCA Scanner - Universal - Version for CVE-2025-55182-CVE-2025-66478 React and Nexus Vulnerability EXTERNAL Vulnerability for React2Shell class of bugs: two freshly disclosed, unauthenticated remote code execution vulnerabilities in the React Server Components RSC "Flight"...

rsfiles-CVE-2026-57827

CVE-2026-57827 — RSFiles! 인증되지 않은 파일 업로드 → RCE 면책 조항 — 승인된 용도로만 사용하세요. 이 프로젝트는 보안 연구 및 방어 테스트 를 위한 개념 증명PoC 자료입니다. 소유한 시스템 또는 명시적인 서면 승인을 받은 시스템에서만 사용할 책임이 있습니다. 동의 없이 제3자를 대상으로 오용하는 것은 불법입니다. 책임 있는 공개 입장은 SECURITY.md를 참조하세요. Joomla용 RSFiles!comrsfiles 구성 요소의 CVE-2026-57827 에 대한 익스플로잇 및 독립형 탐지기입니...

SkyProfile

SkyProfile SkyProfile is a PyQt5 desktop app for querying ADSBexchange globe history for single or multiple aircraft, detecting multi-leg flights, and exporting KML/CSV/JSON/Excel with rich analytics airports, routes, time buckets, callsigns, FAA metadata. Key Features Date-range query by ICAO he...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ⚡ React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ⏩ TL;...

react2shell-CVE-2025-55182-full-rce-script

Инструмент эксплойта Next.js React2Shell CVE-2025-55182 Инструмент класса proof-of-concept для демонстрации критической уязвимости React2Shell CVE-2025-55182 / CVE-2025-66478 только в авторизованных локальных тестовых средах. ⚠️ КРИТИЧЕСКОЕ ПРЕДУПРЕЖДЕНИЕ: АКТИВНАЯ ЭКСПЛУАТАЦИЯ Эта уязвимость CVSS...

React2Shell-PoC-CVE-2025-55182

Симуляция эксплуатации React2Shell CVE-2025-55182 Примечание: Этот документ предназначен только для учебных целей и исследований в области безопасности. Не используйте для атаки на системы без разрешения. 1. Обзор CVE-2025-55182, также известная как React2Shell, — это критическая уязвимость...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Доказательство концепции ⚠️ ТОЛЬКО ДЛЯ ИССЛЕДОВАНИЙ БЕЗОПАСНОСТИ Этот репозиторий содержит доказательство концепции для CVE-2025-55182 , критической уязвимости удаленного выполнения кода в React Server Components. Данный материал предназначен только для авторизованного...

react2shellVulnApp

React2Shell Vulnerable Banking Application Lab Deliberately vulnerable banking app for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional SecureBank built with Next.js App Router and...

React2Shell

Docker Lab & Detection Scanner & PoC Validation: React2Shell CVE-2025-55182 Дисклеймер: Этот репозиторий и его PoC-артефакты созданы строго в образовательных, исследовательских целях и для демонстрации защитных механизмов в изолированной лабораторной среде. Несанкционированное тестирование внешни...