mitigate-cve-2026-23869-react-server-component-loops

How to Fix CVE-2026-23869: Mitigate React Server Component Loops Securing modern enterprise frontend applications requires continuous monitoring of server-side data fetching layouts and framework component life cycles. With the recent public disclosure of CVE-2026-23869, engineering teams are...

CVE-2025-55182

Next.js React Server Components RCE Exploit Exploits CVE-2025-55182 for remote code execution via prototype pollution. Installation root@kitploit: uv sync Usage Command Execution root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" Reverse Shell root@kitploit...

WEB-CLI_RCE_React2Shell

REACT2SHELL 🎯 Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...

CVE-2025-55182-Scanner

CVE-2025-55182 - React Server Components RCE Scanner A comprehensive security testing toolkit for CVE-2025-55182, a critical pre-authentication remote code execution vulnerability in React Server Components. 🎓 NEW: Complete Educational Guide Available! Want to understand this vulnerability 100%? ...

React2Shell-PoC-CVE-2025-55182

React2Shell CVE-2025-55182 Exploitation Simulation Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability affecting...

react2shell-toolkit

Next.js RCE Assessment Toolkit A Python toolkit for validating and investigating CVE-2025-55182, also known as React2Shell , in authorized environments. The vulnerability affects React Server Components and can expose applications built with frameworks such as Next.js to unauthenticated remote co...

vulnerable-next-js-poc

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...

React2Shell-CVE-2025-55182

🎯 React2Shell CVE-2025-55182: De Componentes de Servidor React a RCE Completo Dificultad: Intermedio → Avanzado Categoría: Explotación Web | Deserialización | RCE 🧩 Tarea 1: Introducción — Por qué React2Shell es un gran problema CVE-2025-55182, apodado React2Shell , es una de esas vulnerabilidade...

React2Shell

Docker Lab & Detection Scanner & PoC Validation: React2Shell CVE-2025-55182 Disclaimer: This repository and its PoC artifacts are created strictly for educational, research, and defensive security demonstration purposes within an isolated lab environment. Unsanctioned testing against external...

CVE-2025-55182

Escáner y Exploit de CVE-2025-55182 !Warning Este repositorio está destinado únicamente a fines educativos y de investigación. Utilice los PoCs proporcionados exclusivamente en sistemas que posea o tenga permiso explícito para probar. El acceso no autorizado , la explotación o el mal uso de...

React-Server-Components-RCE

React Server Components Remote RCE Exploitation Tool 📖 Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...

CVE-2025-55182-Exploit-extension

RSC Detector de Huellas Una extensión de Chrome para detectar huellas de React Server Components RSC y Next.js App Router en páginas web. ⚠️ Aviso Importante Esta extensión está destinada únicamente para fines educativos y de investigación en seguridad. Incluye funcionalidad que puede utilizarse...

CVE-2025-55182-golang-PoC

CVE-2025-55182 Ejecución Remota de Código en React Server Components - PoC en Go ⚠️ SOLO PARA PRUEBAS DE SEGURIDAD AUTORIZADAS ⚠️ Descripción CVE-2025-55182 también conocido como CVE-2025-66478 es una vulnerabilidad crítica de Ejecución Remota de Código en los Componentes del Servidor de React...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...

CVE-2025-55182-shellinteractive

CVE-2025-55182-shellinteractive Base used from: https://github.com/Emiyelbarto/CVE-2025-55182-PoC Thank you very much for the great contribution. Overview CVE-2025-55182 is a deserialization vulnerability in Next.js/React Server Components that allows unauthenticated remote attackers to execute...

vuln-app-CVE-2025-55182

Aplicación Next.js RSC Vulnerable - CVE-2025-55182 ⚠️ ADVERTENCIA: Esta aplicación es intencionalmente vulnerable solo con fines educativos y de investigación de seguridad. NO la implemente en producción ni la exponga a internet. Resumen Esta es una aplicación Next.js vulnerable que demuestra...

reactguard

ReactGuard React2Shell scanner powered by Xint. ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 React2Shell across frameworks that support React Server Components. It also includes detectors for CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779. Support stat...

CVE-2025-55182-NextJS-RCE-PoC

CVE-2025-55182 React2Shell Reproduction Environment ⚠️ EDUCATIONAL PURPOSE ONLY This repository is created strictly for educational and research purposes. It demonstrates a critical vulnerability in React Server Components Next.js to help developers understand the risks and importance of updating...

check-react-rce-cve-2025-55182

Escáner de Vulnerabilidad RCE en React CVE-2025-55182 Una herramienta completa de escaneo de seguridad para detectar las vulnerabilidades CVE-2025-55182 y CVE-2025-66478 en proyectos React y Next.js que utilizan React Server Components RSC. 🚨 Descripción general Esta herramienta escanea tu proyec...

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 Herramienta de Explotación Una herramienta de prueba de concepto para demostrar la vulnerabilidad crítica React2Shell CVE-2025-55182 / CVE-2025-66478 únicamente en entornos de prueba locales autorizados. ⚠️ ADVERTENCIA CRÍTICA: EXPLOTACIÓN ACTIVA Esta...