132 matches found
Exploit for CVE-2025-55182
CVE-2025-55182 Next.js RCE Burp Extension Features -...
Exploit for CVE-2025-55182
CVE-2025-55182 - React Server Components RCE PoC Author:...
Exploit for CVE-2025-55182
Affect Version |组件|复现推荐使用版本|易受攻击版本范围| |--|--|--| |Node.js...
Vulnerabilities fixed in React Server Components
React has fixed vulnerabilities in certain versions of React Server Components specifically for versions 19.0.0, 19.1.0, 19.1.1 and 19.2.0. An unauthenticated attacker can send a rogue HTTP request to any Server Function endpoint that, when processed by React, can lead to remote code execution on...
Exploit for CVE-2025-55182
Next.js React Server Components RCE Exploit Exploits CVE-2025...
Exploit for CVE-2025-55182
React2Shell Scanner High Fidelity Detection & Exploitation To...
Exploit for CVE-2025-55182
CVE-2025-55182 - React Server Components RCE Exploit v2.0 A c...
Exploit for CVE-2025-55182
CVE-2025-55182 - React RSC RCE PoC pour la vuln de deserialis...
Wallarm Halts Remote Code Execution Exploits: Defense for Vulnerable React Server Component Workflows
On December 3, 2025, React maintainers disclosed a critical unauthenticated remote code execution RCE vulnerability in React Server Components RSC, tracked as CVE-2025-55182. A working PoC was released publicly, and Wallarm immediately began observing widespread exploitation attempts across...
Exploit for CVE-2025-55182
what's it For CVE-2025-55182 and CVE-2025-66478 Security Resp...
Exploit for CVE-2025-55182
CVE-2025-55182 and CVE-2025-66478 Technical Analysis of Ar...
Exploit for CVE-2025-55182
CVE-2025-55182 - React Server Components RCE Exploit Python C...
DRUPAL-CONTRIB-2025-122
This module enables integration between Next.js and Drupal for headless CMS functionality. When installed, the module automatically enables cross-origin resource sharing CORS with insecure default settings Access-Control-Allow-Origin: , overriding any services.yml CORS configuration. This allows...
Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution
A maximum-severity security flaw has been disclosed in React Server Components RSC that, if successfully exploited, could result in remote code execution. The vulnerability, tracked as CVE-2025-55182, carries a CVSS score of 10.0. The vulnerability has been codenamed React2shell. It allows...
Next.js - Critical - Access bypass - SA-CONTRIB-2025-122
This module enables integration between Next.js and Drupal for headless CMS functionality. When installed, the module automatically enables cross-origin resource sharing CORS with insecure default settings Access-Control-Allow-Origin: , overriding any services.yml CORS configuration. This allows...
Security Bulletin: IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752.
Summary IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-55173 DESCRIPTION: Next.js is a React framework for building full-stack...
CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs
The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enable...
CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs
The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enable...
