CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

React4Shell

React2Shell Exploit Prueba de concepto PoC para la vulnerabilidad de ejecución remota de código en React Server Components RSC / Next.js. Descripción Existe una vulnerabilidad de ejecución remota de código sin autenticación previa en React Server Components versiones 19.0.0, 19.1.0, 19.1.1 y...

React2Shell-Scanner

🔬 React2Shell Scanner Web Application Security Assessment Framework for React and Next.js Applications ⚠️ Important Notice This tool is designed for authorized security testing only. ✅ Authorized penetration testing ✅ Bug bounty programs within scope ✅ Security research with permission ✅ Testing...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. CVE-2025-55182 Emergency Fix Guide: Complete Analysis & Mitigation for Next.js/React RSC Vulnerability CVSS 10.0 This repository is fork...

React2Shell

🚀 R2S - Framework de Explotación RSC para Next.js Framework avanzado de post-explotación para RCE de React Server Components de Next.js Características • Instalación • Uso • Comandos • Ejemplos 📋 Resumen R2S es un completo framework de explotación y post-explotación que apunta a la vulnerabilidad...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 This script detects if a server is affected by RSC/Next.js RCE vulnerabilities CVE-2025-55182 and CVE-2025-66478. It checks the server response for specific vulnerability signatures. Those signatures should be specific according to Searchlight Cyber So the...

React2Shell

@React2Hell — CVE-2025-55182 Exploit 🔥 Exploit de Ejecución Remota de Código RCE en Next.js / React Server root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄...

react-ssr-vulnerability

CVE-2025-55182 - React Server Components RCE POC This is POC for educational and security research purposes only. This vulnerability has been patched in the latest versions of the affected packages. Use this tool only on systems you own or have explicit permission to test. I am not liable for any...

cve-2025-55182-scanner

CVE-2025-55182 / CVE-2025-66478 Vulnerability Scanner React Server Components Flight Protocol Remote Code Execution Detection Tool Executive Summary This scanner identifies systems potentially vulnerable to CVE-2025-55182 React and CVE-2025-66478 Next.js, critical unauthenticated remote code...

React2Shell-CVE-2025-55182

React2Shell-RCE-CVE-2025-55182- React2Shell | CVE-2025-55182 - React Server Components RCE...

cve-2025-55182

CVE-2025-55182 alias React2Shell Configurar entorno de prueba root@kitploit: kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up PoC Payload 1. RCE con respuesta en el cuerpo root@kitploit: POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever...

CVE-2025-55182-POC

CVE-2025-55182 / CVE-2025-66478 Vulnerability Reproduction Environment This is a minimal MVP for reproducing the React2Shell CVE-2025-55182 and Next.js RSC RCE CVE-2025-66478 vulnerabilities. ⚠️ Warning This project is intended for security research and educational purposes only. Do not use it in...

cve-2025-55182-poc

CVE-2025-55182 React2Shell - Academic Proof of Concept ⚠️ DISCLAIMER: EDUCATIONAL USE ONLY This repository contains functional exploit code for a critical vulnerability CVSS 10.0. It is intended strictly for academic research, security analysis, and educational purposes. Do not use this code...

CVE-2025-55182

Understanding React Server Components and the Flight Protocol React Server Components is a feature introduced in React 19 that allows components to be rendered on the server instead of in the client's browser. The server can handle complex computational tasks while only sending the rendered resul...

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container root@kitploit: docker build -t cve-2025-55182:lab...

CVE-2025-55182

Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...

CVE-2025-55182

CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...

react2shell-interactive

React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...

FiberBreak

FiberBreak Exploitation framework for CVE-2025-55182 React2Shell - Critical RCE vulnerability in React Server Components. Overview CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Type : Remote Code Execution RCE Affected : React 19.0.0-rc.0 to 19.0.0, Next.js 15.0.0 to 15.0.3 Discovery : Lachlan Miller...

POC-CVE-2025-55182

NoMoreBreach Advisory: React2Shell CVE-2025-55182 Severity: Critical CVSS 10.0 Vulnerability Type: Remote Code Execution RCE via Deserialization Status: Patched Dec 3, 2025 Advisory Source: NoMoreBreach.com Executive Summary The NoMoreBreach research team highlights a critical vulnerability in...