Lucene search
+L

10093 matches found

CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•18 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from a memory corruption when parsing specially crafted PRT files, which could lead to arbitrary code execution...

7.8CVSS7.6AI score0.00191EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•21 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from a memory corruption when parsing a specially crafted MODEL file, which could lead to the execution of arbitrary code in the current process...

7.8CVSS7.3AI score0.00162EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•20 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted SLDPRT file, which could result in a crash, read sensitive data, or execute arbitrary code...

7.8CVSS7AI score0.00258EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•25 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted CATPRODUCT file, which could result in a crash, read sensitive data, or execute arbitrary code...

7.8CVSS7AI score0.00258EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•21 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a CATPART file, which could result in a crash, disclosure of sensitive data, or execution of arbitrary code...

7.8CVSS6.6AI score0.00258EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•20 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted PRT file, which could result in a crash, read sensitive data, or execute arbitrary code...

7.8CVSS7AI score0.00258EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•14 views

Autodesk Shared Components 安全漏洞

Autodesk Shared Components is a component of Autodesk USA. A security vulnerability exists in Autodesk Shared Components that originates from an out-of-bounds read when parsing a specially crafted CATPRODUCT file, which could result in a crash, read sensitive data, or execute arbitrary code in th...

7.8CVSS7.3AI score0.00278EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/15 11:12 p.m.•22 views

Security Bulletin: QRadar Suite Software includes components with a known vulnerability

Summary QRadar Suite Software includes components with a known vulnerability in React Server Components. This has been addressed in the update. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versio...

10CVSS7.7AI score0.99802EPSS
SaveExploits397Affected Software1
Github Security Blog
Github Security Blog
•added 2025/12/15 10:00 p.m.•26 views

Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versions

Withdrawn Advisory This advisory has been withdrawn because LikeC4 isn’t impacted by CVE-2025-55182 because it doesn’t ship React. React is a peer dependency. Original Description LikeC4 uses React and Next.js: which contain known RCE vulnerabilities, as seen in CVE-2025-55182. 2025-12-15 Edit: t...

10CVSS7.4AI score0.99802EPSS
SaveExploits397References5Affected Software1
GithubExploit
GithubExploit
•added 2025/12/15 9:01 p.m.•178 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ W...

10CVSS8AI score0.99802EPSS
SaveExploits397
IBM Security Bulletins
IBM Security Bulletins
•added 2025/12/15 8:41 p.m.•13 views

Security Bulletin: IBM Concert is vulnerable to remote code execution due to React (CVE-2025-55182)

Summary IBM Concert uses React which is vulnerable to remote code execution. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

10CVSS8.4AI score0.99802EPSS
SaveExploits397Affected Software1
Microsoft Secure
Microsoft Secure
•added 2025/12/15 7:35 p.m.•28 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.3AI score0.99802EPSS
SaveExploits411
Microsoft Secure
Microsoft Secure
•added 2025/12/15 7:35 p.m.•29 views

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

10CVSS8.3AI score0.99802EPSS
SaveExploits411
Tenable Product Security Advisories
Tenable Product Security Advisories
•added 2025/12/15 2:48 p.m.•66 views

[R2] Nessus Versions 10.11.1 and 10.9.6 Fix Multiple Vulnerabilities

R2 Nessus Versions 10.11.1 and 10.9.6 Fix Multiple Vulnerabilities Arnie Cabral Mon, 12/15/2025 - 09:48 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components expat, libxml2, libxslt were found to contain vulnerabilities, and updated...

7.3AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/12/15 10:50 a.m.•292 views

Exploit for CVE-2025-55183

React Server Components 취약점 테스트 React Server Components RSC...

7.5CVSS7.1AI score0.66882EPSS
SaveExploits13
GithubExploit
GithubExploit
•added 2025/12/15 10:32 a.m.•219 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React Server Components RCE NOTE: Written b...

10CVSS7.4AI score0.99802EPSS
SaveExploits411
RedhatCVE
RedhatCVE
•added 2025/12/15 8:25 a.m.•20 views

CVE-2025-55183

A flaw was found in React Server Components RSC. This vulnerability allows an information leak, where a specifically crafted HTTP Hypertext Transfer Protocol request to a vulnerable Server Function can unsafely return its source code. Exploitation requires a Server Function that explicitly or...

5.3CVSS6.7AI score0.64233EPSS
SaveExploits7References5
RedhatCVE
RedhatCVE
•added 2025/12/15 8:03 a.m.•22 views

CVE-2025-67779

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS7.2AI score0.66882EPSS
SaveExploits10References5
RedhatCVE
RedhatCVE
•added 2025/12/15 8:03 a.m.•14 views

CVE-2025-55184

A flaw was found in React Server Components. This vulnerability allows a denial of service via unsafe deserialization of payloads from HTTP Hypertext Transfer Protocol requests to Server Function endpoints. A malicious HTTP request can be crafted and sent to any App Router endpoint that, when...

7.5CVSS7.3AI score0.66882EPSS
SaveExploits10References5
GithubExploit
GithubExploit
•added 2025/12/15 7:35 a.m.•227 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Workin...

10CVSS8.4AI score0.99802EPSS
SaveExploits397
Rows per page
Query Builder