CVE-2025-55182

👻 CVE-2025-55182 Go exploit Interactive RCE exploitation tool for CVE-2025-55182 React Server Components 🎯 What Is This? CVE-2025-55182 is a minimal, interactive RCE exploitation tool targeting CVE-2025-55182 , a critical vulnerability in React Server Components RSC affecting React 19.0.0 - 19.2....

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker Comprobador y reparador CLI para las 13 vulnerabilidades de la Versión de Seguridad de Next.js de Mayo 2026, incluyendo CVE-2026-23870 DoS en Componentes de Servidor de React. Inicio rápido Interactive mode recommended npx...

Rocky Linux 9 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2025_23111)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523111 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2025_23134)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523134 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

Rocky Linux 10.1 [CIQ] Security Update: mysql8.4 / mysql8.4-common / mysql8.4-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_23008)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523008 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

CVE-2026-71542: Improper Neutralization of Input During Web Page Generation

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, GetSimpleCMS-CE is vulnerable to stored Cross-Site Scripting XSS in the "Theme to Components" functionality admin/components.php via the title parameter. The...

Rocky Linux 9 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (crlsa-2025_23109)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523109 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

NPM: hono/jsx renders plain strings unescaped in boundary components, leading to XSS

NPM: hono/jsx renders plain strings unescaped in boundary components, leading to XSS vulnerability discovered by ? in WordPress Npm hono versions 4.13.7...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing Unpack src.zip zip -r src.zip src Build and run vulnerabl...

CVE-2026-12944

CVE-2026-12944: Langflow 1.10.0 — urllib SSRF Langflow OSS ≤ 1.10.0 — vulnerability allowing arbitrary code execution via urllib.request / socket in custom components. The component scanner’s denylist missed these standard library modules. Fixed in 1.10.1 IBM. Severity : PR:L Publicly Reproducibl...

NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-concept Next.js application vulnerable to CVE-2025-55182 also known as "React2Shell", a critical Remote Code Execution RCE vulnerability in React Server Components. ⚠️ WARNING This application is intentionally vulnerable and should ONLY be...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-33244 DESCRIPTION: React Router is a router for React. In versions 7.5.1 through 7.13.1, when using...

r2s

R2S - Escáner React2Shell Un escáner de vulnerabilidades basado en web para CVE-2025-55182 , una vulnerabilidad crítica de Ejecución Remota de Código RCE en React Server Components. Escáner en vivo: https://r2s.mxm0z.com Acerca de CVE-2025-55182 CVE-2025-55182 es una vulnerabilidad crítica CVSS...

react-CVE-2025-55182-fixer

React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...

nextjs-rce-incident-response

Next.js RCE Incident Response — CVE-2025-55182 Type: Live Production Incident Response Vulnerability: CVE-2025-55182 — React Server Components Insecure Deserialization RCE Affected System: Next.js frontend + remote production server Role: Cyber Security Intern — SenseLive Technologies Date:...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Vulnerable Next.js project React RSC landing page This repository contains an example of a multi-page corporate landing page built with Next.js 15.0.0 + React 19.0.0. The site mimics a structure similar to t1.ru: home, products, cases, media, about, contacts. W...

CVE-2025-55182

CVE-2025-55182 Aplicación Vulnerable Construir y ejecutar: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC de https://github.com/msanft/CVE-2025-55182: node poc.js Experimentación con...

react2shell-burp

Escáner y validador de RCE React2Shell CVE-2025-55182 Creador: j0lt Colaborador: https://github.com/shashank18 Una extensión de Burp Suite que detecta y valida la vulnerabilidad React2Shell CVE-2025-55182 — un fallo de ejecución remota de código sin autenticación previa en React Server Components...

R2S_CVE-2025-55182

Escáner CVE-2025-55182 Escáner de vulnerabilidades para CVE-2025-55182 - Ejecución remota de código en Server Actions de Next.js. Acerca de CVE-2025-55182 Gravedad: Crítica CVSS por determinar Versiones afectadas: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impacto:...

cve-2025-55182-lab

Laboratorio RSC CVE-2025-55182 intencionalmente vulnerable Laboratorio Docker local para investigación de seguridad autorizada: React Server Components / Next.js App Router con un stack en el rango afectado por CVE-2025-55182 React2Shell. Úselo solo en su propia máquina. No exponga este contenedo...