5545 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
react2shell-scanner-bypasswaf A command-line tool for detecti...
@storybook/angular (>=10.0.0-beta.0, <=10.1.9), @storybook/ember (>=10.0.0-beta.0, <=10.1.9) +3 more potentially affected by CVE-2025-68429 via @storybook/builder-webpack5 (>=10.0.0, <=10.1.9)
@storybook/builder-webpack5 NPM version =10.0.0, =10.0.0-beta.0, =10.0.0-beta.0, =10.0.0-beta.0, =10.0.0-beta.0, =10.0.0-beta.0, =10.1.9 Source cves: CVE-2025-68429 Source advisory: SNYK:JS-STORYBOOKBUILDERWEBPACK5-14470054...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell PoC This repository provides a minimal intentiona...
Malicious Package
Overview react-redux-up is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview react-vis-website is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview twilio-voice-react-native-reference-server is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview semi-animation-react is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Security Bulletin: React Server Components RCE (CVE-2025-55182) and related advisories
Summary React Server Components RCE vulnerability. Carbon React and related Carbon React based libraries are not related to this CVE. However, many product teams may depend on the affected libraries via frameworks or plugins. We strongly encourage all teams to verify and upgrade any affected...
Directory Traversal
Overview @vitejs/plugin-rsc is a React Server Components RSC support for Vite. Affected versions of this package are vulnerable to Directory Traversal via the /viterscfindSourceMapURL endpoint when processing HTTP requests containing a file:// URL in the filename query parameter. An attacker can...
EUVD-2025-203834
@vitejs/plugin-rs provides React Server Components RSC support for Vite. Prior to version 0.5.8, the /viterscfindSourceMapURL endpoint in @vitejs/plugin-rsc allows unauthenticated arbitrary file read during development mode. An attacker can read any file accessible to the Node.js process by sendi...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.js React2Shell CVE-2025-55182 Expl0it A proof-of-conce...
Exploit for Deserialization of Untrusted Data in Facebook React
🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478...
Exploit for Deserialization of Untrusted Data in Facebook React
No d...
Exploit for Deserialization of Untrusted Data in Facebook React
FiberBreak Exploitation tool for CVE-2025-55182 React2Shell...
CVE-2025-68155
creationtimestamp| type| source ---|---|--- 2025-12-16 09:11:25+00:00| published-proof-of-concept| https://github.com/vitejs/vite-plugin-react/security/advisories/GHSA-g239-q96q-x4qm...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.js CVE-2025-55182 Proof of Concept This is a proof-of-co...
Vite Plugin React 安全漏洞
Vite Plugin React is an open source plugin for Vite. A security vulnerability exists in Vite Plugin React versions prior to 0.5.8 that stems from an arbitrary file read vulnerability in the /viterscfindSourceMapURL endpoint...
The vulnerability of the npm React Router package, related to insufficient handling of exceptional states, allows a violator to trigger a service failure.
The vulnerability of the npm React Router package is related to insufficient handling of exceptional states. Exploiting this vulnerability may allow a remote attacker to cause service failures...
Security Bulletin: QRadar Suite Software includes components with a known vulnerability
Summary QRadar Suite Software includes components with a known vulnerability in React Server Components. This has been addressed in the update. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versio...