CVE-2025-55182

CVE-2025-55182 - React2Shell A modified and boosted exploit for CVE-2025-55182 a pre-authentication Remote Code Execution in React Server version 19.0, 19.1.0, 19.1.1, and 19.2.0 The vulnerability spans the following: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Pat...

CVE-2025-55182-exploit

⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Only test systems you own or have explicit written permission to test Unauthorized use is illegal and unethical The developers assume no liability for misuse Use responsibly and in compliance with all...

CVE-2025-55182-Toolbox

React2Shell: Comprehensive Exploitation Tool for CVE-2025-55182 Author: lamaper / BITs2Sys Version: 1.0.1 License: MIT 📝 Tool Introduction This tool is an automated penetration testing tool specifically designed for CVE-2025-55182 React Server Components / Next.js prototype pollution leading to...

scanner-for-CVE-2025-55182-vulnerability

🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...

cve-2025-55182-react2shell_reproduction

CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth Remote Code Execution in React Server Components Discovered by Chinese threat actors. Actively exploited by China-nexus APT groups. Overview Dubbed "React2Shell" , this vulnerability enables unauthenticated remote code execution via unsaf...

CVE-2025-55182

CVE-2025-55182 - React & Next.js Server Actions RCE Exploit Full-featured Remote Code Execution exploit and scanner for CVE-2025-55182 in React/Next.js Server Actions. Original PoC: Spritualkb/CVE-2025-55182-exp Overview CVE-2025-55182 is a critical prototype pollution vulnerability in React Serv...

POC-CVE-2025-55182

CVE-2025-55182 Advanced Scanner A full-featured exploitation utility for CVE-2025-55182 — Remote Code Execution via React Server Components in Next.js. The scanner automatically crafts the multipart payload and abuses process.mainModule.require'childprocess'.execSync to achieve arbitrary OS comma...

CVE-2025-55182

CVE-2025-55182 Scanner & Exploiter !Warning This repository is intended for educational and research purposes only. Use the provided PoCs exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this repository is illegal...

react2shell-checker

React2Shell Checker A security vulnerability scanner for detecting the React2Shell vulnerability CVE-2025-55182 in Next.js and React applications. Overview React2Shell Checker allows you to scan websites to detect if they are running vulnerable versions of Next.js or React Server Components. The...

React2Shell

React2Shell /$$$$$$$ /$$ /$$$$$$ /$$$$$$ /$$ /$$ /$$ | $$ $$ | $$ /$$ $$ /$$ $$| $$ | $$| $$ | $$ \ $$ /$$$$$$ /$$$$$$ /$$$$$$$ /$$$$$$ |/ \ $$| $$ /| $$$$$$$ /$$$$$$ | $$| $$ | $$$$$$$/ /$$ $$ | $$ /$$/| $$/ /$$$$$$/| $$$$$$ | $$ $$ /$$ $$| $$| $$ | $$ $$| $$$$$$$$ /$$$$$$$| $$ | $$ /$$/ \ $$| $...

React2Shell-Toolbox

React2Shell Toolbox A security testing toolkit built with Electron + Vue 3, focused on React Server Actions vulnerability detection and exploitation. 中文文档 | English Overview React2Shell Toolbox is a security testing tool designed for Next.js React Server Actions prototype pollution vulnerability...

react2shell-scanner

🚨 React2Shell Scanner CVSS 10.0 RCE in React Server Components. Is your React 19 app vulnerable? Fast, accurate scanner for CVE-2025-55182 React2Shell - a critical remote code execution vulnerability exploited in the wild. Zero false positives with intelligent Server Components detection. 🚨 About...

Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

GitHub CVE Scanner 🔍 Quickly scan GitHub repositories for critical React and Next.js RSC vulnerabilities Overview A browser-based scanner that checks all GitHub repositories for known security vulnerabilities in React Server Components: CVE| Packages| Severity| Description ---|---|---|---...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...

DoS-via-cache-poisoning-by-forcing-SPA-mode-CVE-2025-43864-

Welcome to React Router! A modern, production-ready template for building full-stack React applications using React Router. Features 🚀 Server-side rendering ⚡️ Hot Module Replacement HMR 📦 Asset bundling and optimization 🔄 Data loading and mutations 🔒 TypeScript by default 🎉 TailwindCSS for stylin...

CVE-2025-55182-React2Shell-RCE

CVE-2025-55182 - React2Shell Unauthenticated RCE in React Server Components CVE-2025-55182, also known as React2Shell , is a critical unauthenticated Remote Code Execution RCE vulnerability affecting React Server Components packages versions 19.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability ma...

React2Shell-Exploit-CVE-2025-55182

💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝ ██╔══██║██║ ██║...

CVE-2026-55422

The conda-forge website is vulnerable to Stored DOM XSS due to the unsanitized use of dangerouslySetInnerHTML in two React components within the status dashboard. The root cause is that the site renders raw output—such as build logs and tracebacks—captured by the autotick bot (regro/cf-scripts) d...

CVE-2026-55422 conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard

conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization the project has no DOMPurify or equivalent dependency. JSON...

CVE-2025-55182

CVE-2025-55182 https://github.com/user-attachments/assets/0da9a623-fe2a-4a96-8192-7a07a76635d7 React2Shell Scanner - Burp Suite Extension Description React RCE Scanner is a Burp Suite extension designed to detect and exploit the React vulnerability CVE-2025-55182 Remote Code Execution in React...