CVE-2025-55182-react2shell

CVE-2025-55182: Exposed React Server Components RSC Detector This repository contains a Nuclei template for detecting React Server Components exposure associated with CVE-2025-55182. The vulnerability affects applications built with React/Next.js where the RSC negotiation layer is unintentionally...

React2Hell

🧨 React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React Server Remote Code Execution RCE Exploit █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ Next.js/React Server RCE Exploit —...

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool A powerful exploit tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js React Server Components. This tool allows remote command execution RCE in vulnerable Next.js applications with built-in WAF bypass capabilities. Overview CVE-2025-55182 is a critic...

CVE-2025-55182

CVE-2025-55182 — React2Shell INDEX ABOUT ENVIRONMENT HOW TO USE ABOUT CVE-2025-55182 "React2Shell" is an unauthenticated RCE vulnerability CVSS 10.0 in the Flight protocol deserializer of React Server Components. Vulnerability Overview The reviveModel function in React's Flight protocol client do...

CVE-2025-55184

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container docker build -t cve-2025-55182:lab . docker run -...

jshole

jshole A simple JavaScript components vulnrability scanner, based on RetireJS. Why use JShole instead of RetireJS? By default, RetireJS only searches one page, but JShole tries to crawl all pages. Get Started Requirements requests Install git clone https://github.com/callforpapers-source/jshole.g...

CVE-2025-55182-Exploiter

🛡️ RSC Sentinel Pro Advanced React Server Components RSC Auditor & CVE-2025-55182 Exploitation Toolkit 🔥 Detect. Fingerprint. Exploit. A Chrome Extension for Security Researchers & Bug Hunters targeting Next.js App Router RSC vulnerabilities — especially CVE-2025-55182 RSC Deserialization RCE. ✅...

Next.js-RSC-RCE-Scanner-CVE-2025-66478

Next.js RSC RCE Scanner and POC/Exploit Collection CVE-2025-66478 A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability. This Scanner do not exploit the vulnerability Vulnerability Description...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 Usa...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC This project is a CVE-2025-55182 - React Server Components RSC RCE Proof of Concept , demonstrating remote code execution triggered under specific conditions via vm.runInThisContext and malicious ACTION payload. Python side: Automates sending malicio...

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution Property| Value ---|--- CVE ID| CVE-2025-55182 CVSS| 10.0 Critical CWE| CWE-502: Deserialization of Untrusted Data Type| Pre-Auth RCE Affected Versions Component| Affected Versions ---|--- Reac...

CVE-2025-55182

CVE-2025-55182 React Server Components Remote Code Execution CVE-2025-55182 and Next.js Remote Code Execution CVE-2025-66478. This vulnerability primarily affects the Server Actions functionality in react-server-dom-webpack. Due to missing security validation when parsing client-submitted forms, ...

JEFAZO-CVE-2025-55182-Checker

JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — Critical React Server Vulnerability 🧠 What It Is ⚛️ A critical security flaw in React Server Components RSC 🧨 Caused by unsafe deserialization 🌐 Exploitable via network requests 🔓 No authentication required ☠️ Can lead to Remote Code Execution RCE ✅ This means attackers could...

CVE-2025-55182

CVE-2025-55182 A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. 🚀 Installation wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chmod +x...

React2Shell-Scanner

CVE-2025-55182 and CVE-2025-66478 Vulnerability Checker A non-intrusive detection tool for identifying vulnerable React Server Components RSC implementations affected by CVE-2025-55182 React and CVE-2025-66478 Next.js. This tool performs active detection using benign, non-malicious payloads to...

CVE-2025-55182

CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...

React2Shell-CVE-2025-55182

🎯 React2Shell CVE-2025-55182: From React Server Components to Full RCE Difficulty: Intermediate → Advanced Category: Web Exploitation | Deserialization | RCE 🧩 Task 1: Introduction — Why React2Shell Is a Big Deal CVE-2025-55182, nicknamed React2Shell , is one of those vulnerabilities that instant...