1039 matches found
react2shell-poc-CVE-2025-55182
React2Shell PoC CVE-2025-55182 一个针对 React2Shell CVE-2025-55182 的概念验证 PoC 脚本，这是一个影响使用 Server Actions 的 Next.js 应用的严重远程代码执行 RCE 漏洞。 !WARNING 免责声明 ：此工具仅用于教育和授权测试目的。我对任何滥用行为不承担责任。 描述 该脚本利用了 React Server Components "Flight" 协议中的一个不安全反序列化漏洞。它允许未经身份验证的攻击者在服务器上执行任意 JavaScript 代码，从而实现部分远程代码执行 RCE。 功能...
CVE-2025-55182-React2Shell-RCE
CVE-2025-55182 - React2Shell（React 服务端组件中的未认证 RCE） CVE-2025-55182，又称 React2Shell ，是一个严重的未认证远程代码执行（RCE） 漏洞，影响 React 服务端组件包（版本 19.0、19.1.0、19.1.1 和 19.2.0）。 该漏洞可能允许攻击者通过单个精心构造的 HTTP 请求 在易受攻击的服务器上实现任意代码执行，无需进行身份验证。 概述 React 服务端组件使用 Flight 协议 在客户端和服务器之间序列化和反序列化组件数据。...
CVE-2025-55182
📌 CVE-2025-55182 — React2Shell 在 React Server Components 中的严重未认证远程代码执行 RCE 📖 概述 CVE-2025-55182, 非正式称为 React2Shell, 是在 React Server Components RSC 及相关包中于 2025 年 12 月 3 日披露的一个严重远程代码执行 RCE 漏洞。该漏洞允许未经认证的攻击者通过发送特制的 HTTP 请求（服务器对其进行了不正确的反序列化）在易受攻击的服务器上执行任意代码。 nvd.nist.gov +1 此问题具有最高严重性评分 CVSS 10.0 /...
CVE-2025-55182
CVE-2025-55182 - React Server Components RCE NOTA: Escrito por IA/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 es una vulnerabilidad RCE crítica en el Protocolo Flight de React. El ataque encadena path traversal + inyección de chunks falsos + abuso del handler $B...
CVE-2025-55182
CVE-2025-55182 - React2Shell CVE-2025-55182 未认证 RCE，通过 React Server Components Flight 反序列化实现 针对启用 React Server Components 的 Next.js App Router 应用中 CVE-2025-55182 的独立利用程序。向 server-action 端点构造 RSC Flight 载荷可实现未认证的远程代码执行。附带一个 Node.js V8 Inspector（调试端口）本地权限提升辅助工具，可通过 process.mainModule.require...
react-cve-2025-55182
fix-react2shell 一个用于检测和修复 React Server Components 与 Next.js 应用中严重 CVE-2025-55182 （React2Shell）漏洞的 CLI 工具。 漏洞详情 CVE-2025-55182 是一个严重的（CVSS 10.0）未认证远程代码执行漏洞，影响范围包括： React Server DOM 软件包 （版本 19.0.0、19.1.0、19.1.1、19.2.0） Next.js （版本 14.3.0-canary.77 至未修补的 15.x 和 16.x） 该漏洞是 React Server Components...
cve-2025-55182-mitigator
cve-2025-55182-mitigator 防御性扫描器 + CVE-2025-55182 （React 服务端组件 / Flight 协议不安全反序列化）缓解指南。 该工具旨在帮助您： 基于依赖版本识别可能存在漏洞 的仓库 快速应用确定性缓解（补丁/升级）目标 重要 立即修补是唯一的确定性缓解措施。 此工具无法证明可利用性 。它使用版本启发式方法及仓库信号。 如果您怀疑已遭入侵，请遵循您的事件响应流程。 升级目标（确定性缓解） 根据2025年12月的指南： React: 19.0.1 或 19.1.2 或 19.2.1 Next.js: 16.0.7 或 15.5.7 或...
CVE-2025-55182
CVE-2025-55182 — React Server Components 未认证远程代码执行 严重性： 严重 — CVSS 10.0 CWE： CWE-502（不受信任数据的反序列化） 供应商： Meta（Facebook） 披露日期： 2025年12月3日 概述 CVE-2025-55182 是 React Server Components RSC 中的一个最高严重性未认证远程代码执行 RCE 漏洞，被称为 React2Shell 。该漏洞存在于 React 如何解码通过 Flight 协议 发送到 React Server Function...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Input: powermate – fixed a use-after-free in powermateconfigComplete. Syzbot has identified a use-after-free bug 1 in the powermate driver. This occurs when the device is disconnected, causing memory data related to the...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: afunix: Fixed a data race around unixtotinflight. unixtotinflight is updated under spinlockunixgclock, but unixreleasesock reads it without locking. We will use READONCE for unixtotinflight...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Do not keep the queue frozen during system suspension. The commit 4ce6e2db00de “virtio-blk: Ensure no requests are in the virtqueues before deleting the vqs.” replaces “queue quiesce” with “queue freeze” in virtio-blk...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: cifs: Fixed a mid leak that occurred during reconnection after a timeout threshold. When the number of responses with the status STATUSIOTIMEOUT exceeds a specified threshold NUMSTATUSIOTIMEOUT, we reconnect the connection...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Bonding: Fix for xfrm realdev null pointer dereference We should not set realdev to NULL, because packets may still be in transit, and xfrm might call xdodevoffloadok in parallel. All callbacks assume that realdev is set. Example...
UBUNTU-CVE-2026-89520
In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared core-wide lock. A -picktask that releases the rq lock leaves every...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React2Shell CVE-2025-55182 unauthenticated...
CVE-2026-47892
A flaw was found in Spring Framework. This vulnerability allows a header predicate bypass to occur in a pre-flight request within a WebFlux application that uses functional endpoints and is deployed with DispatcherServlet. This bypass could potentially lead to unexpected behavior or security poli...
CVE-2026-86713
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the loadmon module's stop path where exitandcleanup deletes the LoadMon object and frees the performance counter before perfend attempts to access it. Attackers can trigger this vulnerability by issuing the loadmon stop comma...
CVE-2026-86713 PX4 Autopilot through 1.17.0 Use-After-Free in load_mon
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the loadmon module's stop path where exitandcleanup deletes the LoadMon object and frees the performance counter before perfend attempts to access it. Attackers can trigger this vulnerability by issuing the loadmon stop comma...
CVE-2021-44319
Parrot AR.Drone 1 and AR.Drone 2 are vulnerable to Denial of Service. The Parrot AR.Drone platform is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controller during mid-flight...