CVE-2025-55182-React-RCE

CVE-2025-55182-React-RCE Descrizione e principio del progetto Il primo EXP al mondo per la vulnerabilità React Server RCE CVE-2025-55182, in grado di bypassare il rilevamento WAF sfruttando le caratteristiche RSC. Il primo exploit al mondo per la RCE di React Server CVE‑2025‑55182 che può bypassa...

rschunter

RSC Hunter Uno scanner e strumento di exploit potente e multi-thread per le vulnerabilità dei React Server Component RSC. Questo strumento è progettato per identificare e sfruttare vulnerabilità RCE nelle implementazioni RSC, supportando varie tecniche e strategie di bypass. Nota : Data l'enorme...

scanner-for-CVE-2025-55182-vulnerability

🛡️ Scanner de vulnérabilités GitHub pour CVE-2025-55182 RCE React/Next.js Ce script Python est conçu pour analyser tous vos dépôts GitHub publics et privés à la recherche de dépendances potentiellement vulnérables à CVE-2025-55182 une exécution de code à distance critique affectant des versions...

react2shelldemo

React2Shell CVE-2025-55182 — Demonstração Local de Segurança RSC ⚠️ AVISO Este repositório é apenas para pesquisa educacional e de segurança defensiva. NÃO tente executar este código contra: Sistemas de produção Sites públicos Servidores que você não possui ou não tem permissão explícita para...

R2SAE

R2SAE - React2Shell Auto-Exploit Eine Firefox-Erweiterung zur Erkennung und Ausnutzung von CVE-2025-55182 Prototype-Pollution-Schwachstelle in React Server Actions Funktionen • Installation • Verwendung • Haftungsausschluss ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für autorisierte...

cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Sicherheitsanalyse Übersicht Dieses Projekt ist eine technische Analyse von CVE-2025-55182, einer kritischen Remote Code Execution RCE Schwachstelle, die im Dezember 2025 veröffentlicht wurde. Die Schwachstelle betrifft React Server Components und erlaubt Angreifern,...

cve-2025-55182-analysis

CVE-2025-55182 — RCE-Analyse von React Server Components Analyse von Webanwendungssicherheitslücken · M2 Cybersecurity · 2025 Autor: Niane Mohamed · LinkedIn Ende-zu-Ende-Ausnutzungskette einer kritischen CVSS 10.0 unsicheren Deserialisierungsschwachstelle in React Server Components, von der...

react2shell-scanner

🚨 React2Shell Scanner React Server Components में CVSS 10.0 RCE। क्या आपका React 19 ऐप असुरक्षित है? CVE-2025-55182 React2Shell के लिए तेज़, सटीक स्कैनर - एक गंभीर रिमोट कोड निष्पादन कमजोरी जिसका वास्तविक दुनिया में शोषण किया जा रहा है। बुद्धिमान Server Components पहचान के साथ शून्य गलत सकारात्मक...

React2P4IM0Nshell

React2P4IM0Nshell 💥Erweiterungstool für erweiterte Audits und Exploitation von RCE/Source-Leak/DoS CVE-2025-55182/83/84 für Next.js- und React-Server-Components-Umgebungen RSC direkt aus deinem Browser, mit integriertem Linux-Terminal in der Erweiterung selbst, um jede Reverse Shell zu empfangen ...

CVE-2025-55182

CVE-2025-55182: React2Shell - Toolkit per l'esecuzione remota di codice in Next.js !WARNING Questo strumento è fornito esclusivamente per test autorizzati e scopi educativi. L'accesso non autorizzato alla rete e l'esfiltrazione di dati sono illegali. Gli utenti sono responsabili di garantire di...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182---Advanced-React-Server-Components-RCE-Exploit...

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The connection is...

Exploit for Deserialization of Untrusted Data in Facebook React

Tìm hiểu về React Server Components và giao thức Flight REac...

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-turbopack versions = 19.0.0, 19.0.8...

Allocation of Resources Without Limits or Throttling

Overview react-server-dom-webpack is a React Server Components bindings for DOM using Webpack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttli...

Allocation of Resources Without Limits or Throttling

Overview react-server-dom-parcel is a React Server Components bindings for DOM using Parcel. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

Allocation of Resources Without Limits or Throttling

Overview react-server-dom-turbopack is a React Server Components bindings for DOM using Turbopack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or...

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-webpack versions = 19.0.0, 19.0.8...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +52 more potentially affected by CVE-2026-44907 via react-server-dom-webpack (>=19.0.0, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.0.4, =2.0.3-next.0 an...

react-server-dom: Denial of Service in Server Functions

Impact A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to out-of-memory exceptions or excessive CPU usage. We recommend updating immediately. The vulnerability exists in versions 19.0.0 through 19.0.7,...