CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable...

react-cve-2025-55182-lab

Configuração: root@kitploit: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab root@kitploit: cd react-cve-2025-55182-lab root@kitploit: sudo docker build -t react-rsc-lab . root@kitploit: sudo docker run -p 3000:3000 react-rsc-lab Exploração: root@kitploit: curl...

CVE-2025-55182

CVE-2025-55182 Nextjs POC Ein kleines Repository, das Folgendes enthält: test-app/: eine Next.js 16 React 19 Testanwendung mit dem App Router. exploit.js: ein lokales Proof-of-Concept-Skript, das zum Demonstrieren und Testen des Serververhaltens bei der Multipart/Next-Action-Verarbeitung verwende...

CVE-2025-55182-bypass

CVE-2025-55182 Bypass dell'header Bypass dell'header Next-Action per CVE-2025-55182. Consente di ottenere RCE React RSC senza header distintivi, aggirando le regole WAF. Scoperta chiave L'header Next-Action NON è richiesto per lo sfruttamento...

Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...