CVE-2025-55182-PoC

CVE-2025-55182-PoC CVE-2025-55182에 대한 PoC Usage: python3 poc.py -u http://target.com --cmd "" 법적 고지 이 도구는 교육 목적 및 승인된 보안 테스트를 위해서만 제공됩니다. 사전 상호 동의 없이 대상을 공격하는 데 이 도구를 사용하는 것은 불법입니다. 개발자는 어떠한 책임도 지지 않으며, 이 프로그램으로 인한 오용이나 손해에 대해 책임을 지지 않습니다. 요구 사항 pip install requests 사용법 이 도구는 세 가지 모드로 실행할 수 있습니다:...

CVE-2025-55182

CVE-2025-55182 - React2Shell CVE-2025-55182 React Server Components Flight 역직렬화를 통한 인증 없는 RCE Next.js App Router 앱에서 React Server Components를 활성화한 경우의 CVE-2025-55182를 위한 독립 실행형 익스플로잇입니다. 서버 액션 엔드포인트로 제작된 RSC Flight 페이로드를 전송하여 인증 없이 원격 코드 실행을 달성합니다. process.mainModule.require 샌드박스 우회를 통해 권한 있는...

CVE-2026-75604

CVE-2026-75604 RCE PoC CVE-2026-75604에 대한 Python 개념 증명PoC으로, Windows 호스트에서 실행되는 Next.js 애플리케이션 중 Pages Router와 App Router를 Cache Components 없이 함께 사용하는 경우 발생하는 인증 없는 원격 명령 실행 취약점입니다. 데모 요구 사항 Next.js =13.4 =16.0 16.3.3 네이티브 Windows 서버 Cache Components가 없는 Pages Router 및 App Router 동적 Pages ISR 라우트...

Rust_CVE-2025-55182

CVE-2025-55182 脆弱性悪用ツール（Rust版） プロジェクト概要 本プロジェクトは、Rust言語で開発されたセキュリティ研究ツールであり、[email protected] に存在するリモートコード実行（RCE）脆弱性を対象としています。この脆弱性により、攻撃者は悪意のある Server Action リクエストを構築することで、認証なしで対象サーバー上で任意のコードを実行できます。 コア機能 このツールは複数の悪用方法を提供します： コマンド実行：vm モジュールまたは childprocess モジュールを介して対象サーバー上で任意のシェルコマンドを実行...

CVE-2025-66478

1 POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

CVE-2026-91154

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

CVE-2026-91154 Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

EUVD-2026-88333

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

CVE-2026-91154 Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

CVE-2026-91154

The MarcosCamara01 Ecommerce Template (before commit ec97209 ) is vulnerable to a Missing Authentication for Critical Function (CWE-306) within the revalidateProducts Server Action located in src/app/actions.ts. Because the file uses a "use server" scope without session or role checks, the revali...

CVE-2026-91154 Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

CVE-2026-91154: Missing Authentication for Critical Function

Missing Authentication for Critical Function CWE-306 in the product cache revalidation Server Action src/app/actions.ts, revalidateProducts in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote, unauthenticated attacker to force expiration of the entire storefront product cac...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React2Shell CVE-2025-55182 unauthenticated...

CVE-2026-49455 Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...

CVE-2026-49455 Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...

CVE-2026-49455

Waku (a minimal React framework, npm package) prior to 1.0.0-beta.1 is vulnerable to cross-origin CSRF on its RSC server action dispatch. The root cause is the absence of any Origin or Sec-Fetch-Site validation in the RSC dispatch branch of request.ts, allowing a cross-origin attacker to invoke a...

Next.js Framework 13.x < 15.5.21 / 16.x < 16.2.11 Multiple Vulnerabilities

The Next.js Framework on the remote host is affected by multiple vulnerabilities: - A server-side fetch with a request body may return a cached response body from a different request to the same URL but different body. Confidential data in the POST's response body would then leak to unauthorized...

Exploit for CVE-2026-75604

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-...

ANT-2026-BTRNT5A3 · supabase/supabase · broken-access-control

broken-access-control high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BTRNT5A3: Server action accepts client-controlled CRM backend targets submitFormAction is exporte...

CVE-2026-64643

A flaw was found in Next.js. Unauthenticated users can exploit this vulnerability by accessing publicly served client artifacts, which may disclose Server Action IDs. This bypasses authentication on pages where these endpoints are used, leading to information disclosure. While primarily an...