CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 è una vulnerabilità critica di Esecuzione Remota di Codice RCE che colpisce React Server Components RSC. 📌 Panoramica Questa vulnerabilità consente a aggressori non autenticati di eseguire codice arbitrario su server vulnerabili. Il problema ha origin...

React2Shell

@React2Hell — CVE-2025-55182 Exploit 🔥 Exploração de Execução Remota de Código RCE no Next.js / React Server root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄...

PoC-RCE-CVE-2025-55182

🔥 Toolkit di Exploit RSC RCE Toolkit avanzato per lo sfruttamento delle vulnerabilità di Esecuzione Remota di Codice nei React Server Components Solo per test di penetrazione autorizzati e ricerca sulla sicurezza Funzionalità • Installazione • Utilizzo • Integrazione Shodan • Esempi • Disclaimer ...

CVE-2025-55182

📌 CVE-2025-55182 — React2Shell Execução Remota de Código RCE Crítica Não Autenticada em React Server Components 📖 Visão Geral CVE-2025-55182, informalmente apelidada de React2Shell, é uma vulnerabilidade crítica de execução remota de código RCE divulgada em 3 de dezembro de 2025 em React Server...

react-cve-2025-55182

fix-react2shell Uno strumento CLI per rilevare e correggere la vulnerabilità critica CVE-2025-55182 React2Shell nei componenti React Server Components e nelle applicazioni Next.js. La vulnerabilità CVE-2025-55182 è una vulnerabilità critica CVSS 10.0 di esecuzione remota di codice non autenticata...

React-site-CVE-2025-55182

React-Website – CVE-2025-55182 README: Angreifbares Next.js-Projekt React RSC Landingpage Dieses Repository enthält ein Beispiel einer mehrseitigen Corporate-Landingpage mit Next.js 15.0.0 + React 19.0.0. Die Seite simuliert eine Struktur ähnlich wie t1.ru: Startseite, Produkte, Fallstudien,...

CVE-2025-24016

CVE-2025-24016 ثغرة إلغاء تسلسل غير آمنة في خوادم Wazuh تسمح بتنفيذ التعليمات البرمجية عن بُعد من خلال حقن قاموس غير منقح في طلبات/استجابات DAPI. تنشأ هذه المشكلة من الطريقة التي يتم بها تسلسل معاملات DistributedAPI كـ JSON ثم إلغاء تسلسلها باستخدام دالة aswazuhobject في...

React2Shell-PoC-CVE-2025-55182

Simulazione dello sfruttamento di React2Shell CVE-2025-55182 Nota: Questo documento è solo a scopo educativo e di ricerca sulla sicurezza. Non utilizzarlo per attaccare sistemi senza autorizzazione. 1. Panoramica CVE-2025-55182, nota anche come React2Shell, è una grave vulnerabilità di Remote Cod...

NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 प्रूफ ऑफ कॉन्सेप्ट यह एक प्रूफ-ऑफ-कॉन्सेप्ट Next.js एप्लिकेशन है जो CVE-2025-55182 जिसे "React2Shell" के नाम से भी जाना जाता है के लिए संवेदनशील है, जो React सर्वर कंपोनेंट्स में एक महत्वपूर्ण रिमोट कोड एक्सीक्यूशन RCE कमजोरी है। ⚠️ चेतावनी यह एप्लिकेशन जानबूझकर संवेदनशील...

React2Shell

React2Shell 📌 React2Shell CVE-2025-55182 React2Shell é o nome informal dado a uma vulnerabilidade crítica de Execução Remota de Código RCE que afeta os Componentes de Servidor React RSC e frameworks relacionados como Next.js. Sua gravidade e impacto potencial a tornaram uma grande preocupação nas...

CVE-2025-55182

CVE-2025-55182 Scanner & Exploiter !Warning Dieses Repository ist ausschließlich für Bildungs- und Forschungszwecke bestimmt. Verwenden Sie die bereitgestellten PoCs ausschließlich auf Systemen, die Ihnen gehören oder für die Sie ausdrückliche Erlaubnis zum Testen haben. Unautorisierter Zugriff ,...

React2ShellPoC

CVE-2025-55182 React2Shell को समझना: रिएक्ट सर्वर घटकों के माध्यम से रिमोट कोड निष्पादन की गहन जांच अवलोकन CVE-2025-55182, जिसे React2Shell के नाम से भी जाना जाता है, एक गंभीर रिमोट कोड निष्पादन RCE कमजोरी है जो React Server Components को प्रभावित करती है। यह त्रुटि React के Flight प्रोटोकॉल में...

CVE-2026-19912

The Kaltura HTML5 player (mwEmbed / html5lib) is affected by an unauthenticated remote code execution vulnerability rooted in two compounding flaws: unsafe deserialization of a user-controlled ServiceUrl response via unserialize() in mwEmbedLoader.php, and unsanitized filesystem path construction...

EUVD-2026-65614

The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...

CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

CVE-2020-9496

CVE-2020-9496 - RCE Poiché le 2 richieste relative a xmlrpc in webtools xmlrpc e ping non utilizzano l'autenticazione, sono vulnerabili a una deserializzazione non sicura. Questo problema è stato segnalato al team di sicurezza da Alvaro Munoz [email protected] del team GitHub Security Lab...

React2Shell-PoC

React2Shell-PoC Ein Proof-of-Concept-Exploit für CVE-2025-55182 und CVE-2025-66478 , kritische Remote-Code-Execution-Schwachstellen in React Server Components RSC und Next.js-Anwendungen. Übersicht React2Shell demonstriert die Ausnutzung unsicherer Deserialisierung in...

react2shell-test-server

Server di test React2Shell Un server di test per dimostrare e testare la vulnerabilità React2Shell CVE-2025-55182 Descrizione Abbiamo condotto ricerche sulla RCE React2Shell CVE-2025-55182 da quando è stata rilasciata e abbiamo lavorato per prevenire questa vulnerabilità insieme ai nostri clienti...

CVE-2025-53772-IIS-WebDeploy-RCE

CVE-2025-53772 – IIS WebDeploy-RCE-Exploit Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2025-53772, eine Remote-Code-Ausführung-Schwachstelle in IIS WebDeploy durch unsicheres Deserialisieren. ⚠️ Haftungsausschluss Dieses Tool dient ausschließlich Bildungs- und autorisierte...

DEBIAN-CVE-2026-78683

NLTK before 3.10.0 affected versions =3.9.4 contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse method nltk/parse/transitionparser.py. The method calls pickleload with the default restricted=False, routing deserialization through WarningUnpickler, which does not...