CVE-2025-55182-Scanner

🔍 CVE-2025-55182-Scanner - Detect and Secure Your Applications 🌟 Overview CVE-2025-55182-Scanner is a hybrid security scanner designed to help you identify vulnerabilities in https://raw.githubusercontent.com/captain4554/CVE-2025-55182-Scanner/main/scanner/CV-Scanner-v2.4.zip and Waku application...

reactguard

ReactGuard React2Shell scanner powered by Xint. ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 React2Shell across frameworks that support React Server Components. It also includes detectors for CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779. Support stat...

CVE-2025-55182-Scanner

CVE-2025-55182 Hybrid Security Scanner Uno scanner di sicurezza ibrido e professionale, progettato per colmare il divario tra analisi statica e capacità di sfruttamento dinamico per la CVE-2025-55182. Questo strumento serve sia gli sviluppatori sicurezza shift-left sia i professionisti della...

CVE-2026-49455

creationtimestamp| type| source ---|---|--- 2026-07-08 22:35:05+00:00| published-proof-of-concept| https://github.com/wakujs/waku/security/advisories/GHSA-75w3-gmqx-993q...

GHSA-43FC-V873-QW85 Waku has an Open Redirect via `unstable_redirect` Helper

Summary The unstableredirect helper exported from waku/router/server packages/waku/src/router/define-router.tsx:156–161 accepts an arbitrary string and reflects it unchanged into the HTTP Location response header with no URL validation, scheme restriction, or path-only enforcement. Any applicatio...

GHSA-75W3-GMQX-993Q Waku: Cross-Origin CSRF on RSC Server Action Dispatch

Summary Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registered server action endpoint using a CORS-safelisted content typ...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 CVE-2025-55182-Scanner - Detect and Secure Your Applications...

Exploit for Deserialization of Untrusted Data in Facebook React

🔥 RSC RCE Exploit Toolkit !Versionhttps://img.shields.io...

@skeet-framework/base-sql (>=0.6.7, <=0.6.12), @zemble/node (>=0.0.11, <=0.0.30) +2 more potentially affected by CVE-2024-32652 via @hono/node-server (>=1.3.3, <=1.10.0)

@hono/node-server NPM version =1.3.3, =0.6.7, =0.0.11, =0.19.0-alpha.2, =0.20.2-alpha.0 Source cves: CVE-2024-32652 Source advisory: OSV:GHSA-HGXW-5XG3-69JX...

@zemble/node (>=0.0.11, <=0.0.14), waku (>=0.19.0-alpha.2, <=0.19.1) potentially affected by CVE-2024-23340 via @hono/node-server (>=1.3.3, <=1.4.0)

@hono/node-server NPM version =1.3.3, =0.0.11, =0.19.0-alpha.2, =0.19.1 Source cves: CVE-2024-23340 Source advisory: OSV:GHSA-RJQ5-W47X-X359...

Malicious code in @status-waku-voting/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c8f4907f4eb4f31c6be3e8e52311bcf19ecaaed89d93031b51cfb1d9fca372d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @status-waku-voting/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07b2ca5cf7e5124b0b8dd678ddb944a08e63572048bba91cc3914aa17f1b31b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-612 Malicious code in @status-waku-voting/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07b2ca5cf7e5124b0b8dd678ddb944a08e63572048bba91cc3914aa17f1b31b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...