CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

React2Shell-CVE-2025-55182

React2Shell-RCE-CVE-2025-55182- React2Shell | CVE-2025-55182 - React Server Components RCE...

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container docker build -t cve-2025-55182:lab . docker run -...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

cve-2025-55182-scanner

CVE-2025-55182 / CVE-2025-66478 Vulnerability Scanner React Server Components Flight Protocol Remote Code Execution Detection Tool Executive Summary This scanner identifies systems potentially vulnerable to CVE-2025-55182 React and CVE-2025-66478 Next.js, critical unauthenticated remote code...

CVE-2025-55182-poc

CVE-2025-55182 Proof of Concept Critical Pre-Authentication Remote Code Execution in React Server Components A complete proof-of-concept demonstrating CVE-2025-55182, a critical vulnerability in [email protected] that allows unauthenticated attackers to execute arbitrary code via prototype...

cowcloud

CowCloud a serverless solution to distribute work-loads in AWS CowCloud was originally created to run recon tools and vulnerability scans in a distributed way; for example, one use case might be by bug bounty hunters. This solution is intended to abstract end users from the underlying work requir...

react2shell-interactive

React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...

POC-CVE-2025-55182

NoMoreBreach Advisory: React2Shell CVE-2025-55182 Severity: Critical CVSS 10.0 Vulnerability Type: Remote Code Execution RCE via Deserialization Status: Patched Dec 3, 2025 Advisory Source: NoMoreBreach.com Executive Summary The NoMoreBreach research team highlights a critical vulnerability in...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. CVE-2025-55182 Emergency Fix Guide: Complete Analysis & Mitigation for Next.js/React RSC Vulnerability CVSS 10.0 This repository is fork...

CVE-2025-55182

CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...

CVE-2026-30691

CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote...

CVE-2025-55182

CVE-2025-55182 - React2Shell Pre-authentication RCE in React Server Components. Summary of the CVE A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the react-server-dom-parcel,...

React2Shell

React2Shell CVE-2025-55182 Overview This repository is my research on CVE-2025-55182, also referred to as React2Shell vulnerability. Repo consists of two main part: stand and exploit. References Some info about this security flaw: NIST HackerOne article Summary by Vercel Article by WIZ Author...

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

CVE-2025-55182-Typescript

Links https://github.com/msanft/CVE-2025-55182 https://nextjs.org/blog/CVE-2025-66478 https://vercel.com/changelog/cve-2025-55182 https://www.reddit.com/r/reactjs/comments/1pd8kxu/criticalvulnerabilitiesinreactandnextjs/...

CVE-2025-55182-Attack-Analysis

CVE-2025-55182 Attack Analysis: React Server Components RCE Real-world attack analysis on a production Next.js application 📋 Table of Contents Executive Summary Vulnerability Overview Attack Timeline Technical Analysis Malware Analysis Indicators of Compromise IOCs Mitigation & Response Lessons...

react-vuln-scanner

React CVE-2025-55182 Vulnerability Scanner A bash script to scan your server for React applications vulnerable to CVE-2025-55182 — a critical remote code execution vulnerability CVSS 10.0 in React Server Components. ⚠️ About the Vulnerability On December 3, 2025, the React team disclosed a critica...