Lucene search
+L

8737 matches found

CNNVD
CNNVD
added 2025/12/16 12:0 a.m.8 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted SLDPRT file, which could result in a crash, read sensitive data, or execute arbitrary code...

7.8CVSS7AI score0.00223EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.7 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from a memory corruption when parsing specially crafted PRT files, which could lead to arbitrary code execution...

7.8CVSS7.6AI score0.00176EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.11 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds write when parsing a specially crafted MODEL file, which could result in a crash, data corruption, or execution of arbitrary code in the...

7.8CVSS7.4AI score0.00223EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.8 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds write when parsing a specially crafted CATPART file, which could result in a crash, data corruption, or execution of arbitrary code in the...

7.8CVSS7.4AI score0.0024EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.8 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from a memory corruption when parsing a specially crafted MODEL file, which could lead to the execution of arbitrary code in the current process...

7.8CVSS7.2AI score0.0024EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/15 11:12 p.m.13 views

Security Bulletin: QRadar Suite Software includes components with a known vulnerability

Summary QRadar Suite Software includes components with a known vulnerability in React Server Components. This has been addressed in the update. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versio...

10CVSS7.8AI score0.99616EPSS
SaveExploits380Affected Software1
Github Security Blog
Github Security Blog
added 2025/12/15 10:0 p.m.15 views

Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versions

Withdrawn Advisory This advisory has been withdrawn because LikeC4 isn’t impacted by CVE-2025-55182 because it doesn’t ship React. React is a peer dependency. Original Description LikeC4 uses React and Next.js: which contain known RCE vulnerabilities, as seen in CVE-2025-55182. 2025-12-15 Edit: t...

10CVSS7AI score0.99616EPSS
SaveExploits380References5Affected Software1
GithubExploit
GithubExploit
added 2025/12/15 9:1 p.m.175 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ W...

10CVSS7.7AI score0.99616EPSS
SaveExploits380
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/15 8:41 p.m.9 views

Security Bulletin: IBM Concert is vulnerable to remote code execution due to React (CVE-2025-55182)

Summary IBM Concert uses React which is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

10CVSS8.2AI score0.99616EPSS
SaveExploits380Affected Software1
Microsoft Secure
Microsoft Secure
added 2025/12/15 7:35 p.m.14 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.6AI score0.99616EPSS
SaveExploits394
Microsoft Secure
Microsoft Secure
added 2025/12/15 7:35 p.m.16 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.9AI score0.99616EPSS
SaveExploits394
Tenable Product Security Advisories
Tenable Product Security Advisories
added 2025/12/15 2:48 p.m.36 views

[R2] Nessus Versions 10.11.1 and 10.9.6 Fix Multiple Vulnerabilities

R2 Nessus Versions 10.11.1 and 10.9.6 Fix Multiple Vulnerabilities Arnie Cabral Mon, 12/15/2025 - 09:48 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components expat, libxml2, libxslt were found to contain vulnerabilities, and updated...

7.3AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/15 10:50 a.m.276 views

Exploit for CVE-2025-55183

React Server Components 취약점 테스트 React Server Components RSC...

7.5CVSS6.8AI score0.66215EPSS
SaveExploits13
GithubExploit
GithubExploit
added 2025/12/15 10:32 a.m.210 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React Server Components RCE NOTE: Written b...

10CVSS7.7AI score0.99616EPSS
SaveExploits394
RedhatCVE
RedhatCVE
added 2025/12/15 8:25 a.m.13 views

CVE-2025-55183

A flaw was found in React Server Components RSC. This vulnerability allows an information leak, where a specifically crafted HTTP Hypertext Transfer Protocol request to a vulnerable Server Function can unsafely return its source code. Exploitation requires a Server Function that explicitly or...

5.3CVSS6.5AI score0.63073EPSS
SaveExploits7References5
RedhatCVE
RedhatCVE
added 2025/12/15 8:3 a.m.15 views

CVE-2025-67779

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS6.3AI score0.66215EPSS
SaveExploits10References5
RedhatCVE
RedhatCVE
added 2025/12/15 8:3 a.m.11 views

CVE-2025-55184

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS6.5AI score0.66215EPSS
SaveExploits10References5
GithubExploit
GithubExploit
added 2025/12/15 7:35 a.m.218 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Workin...

10CVSS8.4AI score0.99616EPSS
SaveExploits380
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:0 a.m.6 views

Vulnerability of EFI components of the Linux operating system’s kernel, allowing a hacker to trigger a service failure

The vulnerability of EFI components in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability allows a perpetrator to cause service failures...

5.5CVSS7AI score0.00142EPSS
SaveExploits0References9Affected Software3
Broadcom
Broadcom
added 2025/12/15 12:0 a.m.24 views

unauthenticated remote code execution vulnerability in React Server Components. React (CVE-2025-55182), Next.js (CVE-2025-66478).

CVE-2025-55182 Description: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable co...

10CVSS7.9AI score0.99616EPSS
SaveExploits394
Rows per page
Query Builder