Lucene search
+L

497 matches found

Github Security Blog
Github Security Blog
‱added 2025/12/15 10:0 p.m.‱15 views

Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versions

Withdrawn Advisory This advisory has been withdrawn because LikeC4 isn’t impacted by CVE-2025-55182 because it doesn’t ship React. React is a peer dependency. Original Description LikeC4 uses React and Next.js: which contain known RCE vulnerabilities, as seen in CVE-2025-55182. 2025-12-15 Edit: t...

10CVSS7AI score0.99562EPSS
SaveExploits379References5Affected Software1
GithubExploit
GithubExploit
‱added 2025/12/15 9:1 p.m.‱166 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠ W...

10CVSS7.7AI score0.99562EPSS
SaveExploits379
IBM Security Bulletins
IBM Security Bulletins
‱added 2025/12/15 8:41 p.m.‱9 views

Security Bulletin: IBM Concert is vulnerable to remote code execution due to React (CVE-2025-55182)

Summary IBM Concert uses React which is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

10CVSS8.2AI score0.99562EPSS
SaveExploits379Affected Software1
Microsoft Secure
Microsoft Secure
‱added 2025/12/15 7:35 p.m.‱16 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.9AI score0.99562EPSS
SaveExploits393
Microsoft Secure
Microsoft Secure
‱added 2025/12/15 7:35 p.m.‱12 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.6AI score0.99562EPSS
SaveExploits393
GithubExploit
GithubExploit
‱added 2025/12/15 10:50 a.m.‱269 views

Exploit for CVE-2025-55183

React Server Components 췚앜점 테슀튞 React Server Components RSC...

7.5CVSS6.8AI score0.65592EPSS
SaveExploits13
GithubExploit
GithubExploit
‱added 2025/12/15 10:32 a.m.‱200 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React Server Components RCE NOTE: Written b...

10CVSS7.7AI score0.99562EPSS
SaveExploits393
RedhatCVE
RedhatCVE
‱added 2025/12/15 8:25 a.m.‱11 views

CVE-2025-55183

A flaw was found in React Server Components RSC. This vulnerability allows an information leak, where a specifically crafted HTTP Hypertext Transfer Protocol request to a vulnerable Server Function can unsafely return its source code. Exploitation requires a Server Function that explicitly or...

5.3CVSS6.5AI score0.62405EPSS
SaveExploits7References5
RedhatCVE
RedhatCVE
‱added 2025/12/15 8:3 a.m.‱13 views

CVE-2025-67779

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS6.3AI score0.65592EPSS
SaveExploits10References5
RedhatCVE
RedhatCVE
‱added 2025/12/15 8:3 a.m.‱11 views

CVE-2025-55184

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS6.5AI score0.65592EPSS
SaveExploits10References5
GithubExploit
GithubExploit
‱added 2025/12/15 7:35 a.m.‱208 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Workin...

10CVSS8.4AI score0.99562EPSS
SaveExploits379
Broadcom
Broadcom
‱added 2025/12/15 12:0 a.m.‱24 views

unauthenticated remote code execution vulnerability in React Server Components. React (CVE-2025-55182), Next.js (CVE-2025-66478).

CVE-2025-55182 Description: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable co...

10CVSS7.9AI score0.99562EPSS
SaveExploits393
GithubExploit
GithubExploit
‱added 2025/12/14 5:18 p.m.‱211 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.Js React Server Components RSC Vulnerabilities This re...

10CVSS8.8AI score0.99562EPSS
SaveExploits389
GithubExploit
GithubExploit
‱added 2025/12/14 2:24 p.m.‱167 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner – with PoC CVE-2025-55182 – React Ser...

10CVSS7.2AI score0.99562EPSS
SaveExploits393
GithubExploit
GithubExploit
‱added 2025/12/14 12:59 p.m.‱156 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner 🚀 !Bashhttps://img.shields...

10CVSS7.9AI score0.99562EPSS
SaveExploits379
GithubExploit
GithubExploit
‱added 2025/12/14 12:23 p.m.‱153 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Proof-of-Concept for CVE-2025-55182, a critical...

10CVSS8.4AI score0.99562EPSS
SaveExploits379
GithubExploit
GithubExploit
‱added 2025/12/14 9:52 a.m.‱176 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell – Advanced Discovery & Exploitation Framework An...

10CVSS7.4AI score0.99562EPSS
SaveExploits393
GithubExploit
GithubExploit
‱added 2025/12/14 9:42 a.m.‱199 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 - Proof of Concept A comprehensi...

10CVSS8.6AI score0.99999EPSS
SaveExploits828
GithubExploit
GithubExploit
‱added 2025/12/14 5:24 a.m.‱164 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2P4IM0Nshell đŸ’„Extension Tool para...

10CVSS7AI score0.99562EPSS
SaveExploits379
GithubExploit
GithubExploit
‱added 2025/12/13 11:44 p.m.‱171 views

Exploit for Deserialization of Untrusted Data in Facebook React

R2SHELL !WARNING Este proyecto es SOLO PARA PROPÓSITO...

10CVSS7.2AI score0.99562EPSS
SaveExploits379
Rows per page
Query Builder