CVE-2025-55182

CVE-2025-55182 - React2Shell CVE-2025-55182 React Server Components Flight の逆シリアル化による認証不要のRCE React Server Componentsを有効化したNext.js App RouterアプリケーションにおけるCVE-2025-55182のスタンドアロンエクスプロイトです。サーバーアクションエンドポイントに細工したRSC...

CVE-2026-75604

CVE-2026-75604 RCE PoC CVE-2026-75604 の Python 概念実証コード。Windows 上でホストされている Next.js アプリケーションPages Router と App Router を Cache Components なしで使用における、認証不要のリモートコード実行の脆弱性を実証します。 デモ 要件 Next.js =13.4 =16.0 16.3.3 ネイティブ Windows サーバー Cache Components を使用しない Pages Router と App Router 動的な Pages ISR ルートと動的なキャッ...

Rust_CVE-2025-55182

CVE-2025-55182 脆弱性悪用ツール（Rust版） プロジェクト概要 本プロジェクトは、Rust言語で開発されたセキュリティ研究ツールであり、[email protected] に存在するリモートコード実行（RCE）脆弱性を対象としています。この脆弱性により、攻撃者は悪意のある Server Action リクエストを構築することで、認証なしで対象サーバー上で任意のコードを実行できます。 コア機能 このツールは複数の悪用方法を提供します： コマンド実行：vm モジュールまたは childprocess モジュールを介して対象サーバー上で任意のシェルコマンドを実行...

CVE-2025-66478

root@kitploit: POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

CVE-2025-55182-PoC

CVE-2025-55182-PoC CVE-2025-55182 の PoC root@kitploit: Usage: python3 poc.py -u http://target.com --cmd "" 法的免責事項 このツールは、教育目的および許可されたセキュリティテスト専用に提供されています。事前に相互の同意なしにターゲットへの攻撃にこのツールを使用することは違法です。開発者は一切の責任を負わず、本プログラムによって引き起こされた誤用や損害についても責任を負いません。 要件 pip install requests 使用方法...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React2Shell CVE-2025-55182 unauthenticated...

CVE-2026-49455 Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...

CVE-2026-49455 Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...

CVE-2026-49455

Waku (a minimal React framework, npm package) prior to 1.0.0-beta.1 is vulnerable to cross-origin CSRF on its RSC server action dispatch. The root cause is the absence of any Origin or Sec-Fetch-Site validation in the RSC dispatch branch of request.ts, allowing a cross-origin attacker to invoke a...

Next.js Framework 13.x < 15.5.21 / 16.x < 16.2.11 Multiple Vulnerabilities

The Next.js Framework on the remote host is affected by multiple vulnerabilities: - A server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized...

Exploit for CVE-2026-75604

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-...

ANT-2026-BTRNT5A3 · supabase/supabase · broken-access-control

broken-access-control high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BTRNT5A3: Server action accepts client-controlled CRM backend targets submitFormAction is exporte...

CVE-2026-64643

A flaw was found in Next.js. Unauthenticated users can exploit this vulnerability by accessing publicly served client artifacts, which may disclose Server Action IDs. This bypasses authentication on pages where these endpoints are used, leading to information disclosure. While primarily an...

CVE-2026-64649

A flaw was found in Next.js, a framework for building web applications. A remote attacker can exploit this vulnerability by manipulating Host-associated headers when a Server Action forwards or redirects a request. This can lead to Server-Side Request Forgery SSRF, where the server is tricked int...

EUVD-2026-49401

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...

CVE-2026-64646 Next.js: Unbounded Server Action payload in Edge runtime

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...

CVE-2026-64646 Next.js: Unbounded Server Action payload in Edge runtime

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the...

CVE-2026-64646

CVE-2026-64646 affects Next.js versions 13.0.0–15.5.20 and 16.0.0–16.2.10 where App Router Server Actions running in the Edge runtime can cause unbounded memory growth from oversized Server Action payloads. Impact is excessive memory consumption; fix is upgrade to Next.js 15.5.21 or 16.2.11 (or l...

CVE-2026-64641

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further...

CVE-2026-64643

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these...