react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

CVE-2025-55182-React2Shell-RCE-POC

CVE-2025-55182 - React2Shell RCE Este repositorio documenta la investigación sobre CVE-2025-55182, también conocido como React2Shell, una vulnerabilidad crítica de deserialización insegura en los Componentes del Servidor de React RSC y los frameworks que integran el protocolo RSC Flight,...

react2shell-vulnlab

React2Shell Tribune — VULNERABLE WEB APPLICATION LAB A modern Next.js web app themed as a news / blog portal for CVE-2025-55182 React and CVE-2025-66478 Next.js to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3. Overview Fictional news portal built...

CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC This repository contains proof-of-concept PoC code for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It includes a vulnerable Next.js application and a Node.js exploit script for testing the vulnerability. English · 中文 What is CVE-2025-66478? Thi...

React2Shell-Kingdom

Proyecto de Demostración de Vulnerabilidad React CVE-2025-55182 ⚠️ ADVERTENCIA DE SEGURIDAD Este proyecto demuestra una vulnerabilidad crítica de RCE CVE-2025-55182 / React2Shell en React Server Components 19.1.1. SOLO CON FINES EDUCATIVOS Y DE INVESTIGACIÓN EN SEGURIDAD NUNCA desplegar en...

CVE-2025-55182-POC

CVE-2025-55182 POC & Detection Collection of exploit and detection tools for React Server Components RSC Unsafe Deserialization vulnerability Vulnerability Information CVE-ID : CVE-2025-55182 Affected Versions : React 19.x, Next.js 15.x/16.x when using App Router Attack Vector : RCE via prototype...

CVE-2025-55182

CVE-2025-55182 Si buscas una explicación real, msanft/CVE-2025-55182 tiene una buena con un PoC funcional. Este repositorio solo contiene algunas cosas que probé, que arrojaron resultados interesantes más o menos. ./thing.py ahora contiene un PoC funcional, la mayor parte tomado de...

CVE-2025-66478-Exploit-Poc

Next.js CVE-2025-66478 PoC English | 한국어 This repository contains a Proof of Concept PoC for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It consists of a vulnerable Next.js application and a Python exploit script to test the vulnerability. What is CVE-2025-66478? This is...