react2shell-poc

React2Shell - CVE-2025-55182 PoC Proof of Concept for CVE-2025-55182 , a critical unauthenticated Remote Code Execution vulnerability in React Server Components. CVSS Score: 10.0 Critical Vulnerability The vulnerability exists in React's Flight protocol deserializer. By exploiting prototype...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

CVE-2025-71389_exploit

CVE-2025-71389 — Cal.com Unauthenticated RCE react2shell Unauthenticated remote code execution in Cal.com = 5.9.8 via the React Server Components "Flight" deserialization flaw — "react2shell " CVE-2025-55182 in React, CVE-2025-66478 in Next.js. Cal.com bundles a vulnerable Next.js 15.x. A single...

flight-risk

flight-risk flight risk /flaɪt rɪsk/ — React's Flight protocol is the serialization layer behind React Server Components. CVE-2025-55182 exploits a deserialization flaw in Flight to achieve pre-auth RCE. If your app uses RSC, it's a flight risk. Security toolkit for CVE-2025-55182 React2Shell — a...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.Js React Server Components RSC Vulnerabilities This re...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2...