Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-33244 DESCRIPTION: React Router is a router for React. In versions 7.5.1 through 7.13.1, when using...

r2s

R2S - React2Shell Scanner Un scanner de vulnérabilités web pour CVE-2025-55182 , une vulnérabilité critique d'exécution de code à distance RCE dans les composants serveur React. Scanner en direct : https://r2s.mxm0z.com À propos de CVE-2025-55182 CVE-2025-55182 est une vulnérabilité critique CVSS...

react-CVE-2025-55182-fixer

React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...

nextjs-rce-incident-response

Next.js RCE Incident Response — CVE-2025-55182 Type: Live Production Incident Response Vulnerability: CVE-2025-55182 — React Server Components Insecure Deserialization RCE Affected System: Next.js frontend + remote production server Role: Cyber Security Intern — SenseLive Technologies Date:...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Vulnerable Next.js project React RSC landing page This repository contains an example of a multi-page corporate landing page built with Next.js 15.0.0 + React 19.0.0. The site mimics a structure similar to t1.ru: home, products, cases, media, about, contacts. W...

CVE-2025-55182

CVE-2025-55182 Vulnerable Application Build and run: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC from https://github.com/msanft/CVE-2025-55182: node poc.js Experimentation with...

react2shell-burp

React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...

R2S_CVE-2025-55182

CVE-2025-55182 Scanner Vulnerability scanner for CVE-2025-55182 - Remote Code Execution in Next.js Server Actions. About CVE-2025-55182 Severity: Critical CVSS TBD Affected Versions: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impact: Remote attackers can execute...

cve-2025-55182-lab

CVE-2025-55182 RSC lab intentionally vulnerable Local Docker lab for authorized security research: React Server Components / Next.js App Router with a stack in the CVE-2025-55182 React2Shell affected range. Use only on your own machine. Do not expose this container to the internet. References Rea...

CVE-2025-55182-mass

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation chmod +x scanner.sh && chmod +x automate.sh Usage Scan with default command id bash automate.sh -l domains.txt Disclaimer This tool is for...

CVE-2025-55182-poc

CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. Quick Start Install dependencies npm install Start vulnerable server port 3002 npm start Run RCE exploit npm run exploit Expected Output...

CVE-2025-55182

CVE-2025-55182 Exploit A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6 Usage Clone the repository git clone https://github.com/ahmedshamsddin/CVE-2025-55182 R...

PoC-RCE-CVE-2025-55182

🔥 RSC RCE Exploit Toolkit Advanced exploitation toolkit for React Server Components Remote Code Execution vulnerabilities For authorized penetration testing and security research only Features • Installation • Usage • Shodan Integration • Examples • Disclaimer 📋 Table of Contents Overview...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 is a critical RCE vulnerability in React's Flight Protocol. The attack chains path traversal + fake chunk injection + $B handler abuse to execute...

CVE-2025-55182

📌 CVE-2025-55182 — React2Shell Critical Unauthenticated Remote Code Execution RCE in React Server Components 📖 Overview CVE-2025-55182, informally dubbed React2Shell, is a critical remote code execution RCE vulnerability disclosed on December 3, 2025 in React Server Components RSC and related...

cve-2025-66478

CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...

cve-2025-55182-poc-test

CVE-2025-55182 Demonstration Lab Next.js / React RSC RCE This document provides a complete and reproducible setup for demonstrating CVE-2025-55182 Remote Code Execution RCE against a vulnerable Next.js + React Server Components environment running inside a Multipass Ubuntu VM. The exploit is...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...

React2Shell-Vulnerability-Verification-Script

React2Shell Vulnerability Verification Script verifyreactvulnerability.py What is this script? This is a simple, standalone Python script created to help you quickly determine if your project is affected by the critical React2Shell vulnerability also known as CVE-2025-55182. It performs a two-lev...

React2Shell_cve-2025-55182

React Server Components RCE - CVE-2025-55182 Hello! I hope you're having a great day! 😊✨ What's This About? React Server Components versions 19.0.0 , 19.1.0 , 19.1.1 , and 19.2.0 have a serious security problem. The packages react-server-dom-parcel, react-server-dom-turbopack, and...