Rocky Linux 9 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2025_23111)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523111 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

Rocky Linux 9 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (crlsa-2025_23109)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523109 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

Rocky Linux 10.1 [CIQ] Security Update: mysql8.4 / mysql8.4-common / mysql8.4-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_23008)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523008 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

CVE-2026-71542: Improper Neutralization of Input During Web Page Generation

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, GetSimpleCMS-CE is vulnerable to stored Cross-Site Scripting XSS in the "Theme to Components" functionality admin/components.php via the title parameter. The...

Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2025_23134)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523134 advisory. mysql: DML unspecified vulnerability CPU Oct 2025 CVE-2025-53053 mysql: InnoDB unspecified vulnerability CPU Oct 2025 CVE-2025-53044 mysql: InnoDB...

NPM: hono/jsx renders plain strings unescaped in boundary components, leading to XSS

NPM: hono/jsx renders plain strings unescaped in boundary components, leading to XSS vulnerability discovered by ? in WordPress Npm hono versions 4.13.7...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing Unpack src.zip zip -r src.zip src Build and run vulnerabl...

CVE-2026-12944

CVE-2026-12944: Langflow 1.10.0 — urllib SSRF Langflow OSS ≤ 1.10.0 — 커스텀 컴포넌트에서 urllib.request / socket을 통한 임의 코드 실행이 가능한 취약점. 컴포넌트 스캐너의 차단 목록denylist이 이러한 표준 라이브러리 모듈을 놓쳤습니다. 1.10.1 에서 수정됨 IBM. 심각도 : PR:L 공개 재현 가능 / 낮은 심각도 익스플로잇 엔드포인트 : POST /api/v1/customcomponent 세션 쿠키 또는 베어러 토큰이 필요합니다. 인증된 접...

NextJS-app-CVE-2025-55182

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-concept Next.js application vulnerable to CVE-2025-55182 also known as "React2Shell", a critical Remote Code Execution RCE vulnerability in React Server Components. ⚠️ WARNING This application is intentionally vulnerable and should ONLY be...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in React Router. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-33244 DESCRIPTION: React Router is a router for React. In versions 7.5.1 through 7.13.1, when using...

r2s

R2S - React2Shell 스캐너 웹 기반 취약점 스캐너로, React Server Components의 중요한 원격 코드 실행RCE 취약점인 CVE-2025-55182 를 대상으로 합니다. 라이브 스캐너: https://r2s.mxm0z.com CVE-2025-55182 소개 CVE-2025-55182는 React Server Components Flight 프로토콜의 중요한CVSS 10.0 취약점으로, 인증되지 않은 공격자가 조작된 HTTP 요청을 통해 취약한 Next.js 서버에서 임의 코드를 실행할 수 있게 합니다...

react-CVE-2025-55182-fixer

React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...

nextjs-rce-incident-response

Next.js RCE Incident Response — CVE-2025-55182 Type: Live Production Incident Response Vulnerability: CVE-2025-55182 — React Server Components Insecure Deserialization RCE Affected System: Next.js frontend + remote production server Role: Cyber Security Intern — SenseLive Technologies Date:...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Vulnerable Next.js project React RSC landing page This repository contains an example of a multi-page corporate landing page built with Next.js 15.0.0 + React 19.0.0. The site mimics a structure similar to t1.ru: home, products, cases, media, about, contacts. W...

CVE-2025-55182

CVE-2025-55182 취약한 애플리케이션 빌드 및 실행: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC 출처: https://github.com/msanft/CVE-2025-55182: node poc.js unbundled로 실험: yarn --immutable node --conditio...

react2shell-burp

React2Shell RCE Scanner and Validator CVE-2025-55182 제작자: j0lt 공동 작업자: https://github.com/shashank18 React2Shell 취약점CVE-2025-55182 — React Server Components의 사전 인증 원격 코드 실행 결함 — 을 탐지하고 검증하는 Burp Suite 확장 프로그램입니다. 이 확장 프로그램은 RSC 엔드포인트를 수동적으로 핑거프린팅하고 두 가지 스캔 모드를 통해 안전하지 않은 역직렬화를 능동적으로 탐색합니다. 기능 Saf...

R2S_CVE-2025-55182

CVE-2025-55182 스캐너 CVE-2025-55182 - Next.js Server Actions 원격 코드 실행 취약점 스캐너입니다. CVE-2025-55182 정보 심각도: 치명적 CVSS 미정 영향을 받는 버전: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 영향: 원격 공격자는 Server Actions가 활성화된 취약한 Next.js 애플리케이션을 실행하는 서버에서 임의 코드를 실행할 수 있습니다. 이 취약점은 React...

cve-2025-55182-lab

CVE-2025-55182 RSC 실습 환경 의도적으로 취약함 인가된 보안 연구를 위한 로컬 Docker 실습 환경: React Server Components / Next.js App Router 스택이 CVE-2025-55182 React2Shell 영향을 받는 범위에 있습니다. 자신의 기기에서만 사용하세요. 이 컨테이너를 인터넷에 노출하지 마십시오. 참고 자료 React — React Server Components의 중요 보안 취약점 NVD — CVE-2025-55182 Next.js 보안 권고 릴리스 라인에 대한...

CVE-2025-55182-mass

CVE-2025-55182 스캐너 Next.js 애플리케이션에서 CVE-2025-55182 React 서버 컴포넌트 RCE를 탐지 및 익스플로잇하기 위한 간단한 명령줄 도구입니다. 설치 chmod +x scanner.sh && chmod +x automate.sh 사용법 Scan with default command id bash automate.sh -l domains.txt 면책 조항 이 도구는 교육 및 허가된 보안 테스트 목적으로만 사용됩니다. 소유하지 않거나 테스트할 권한이 없는 시스템에 사용하지 마십시오. 참고 자료...

CVE-2025-55182-poc

CVE-2025-55182 - React Server Components 프로토타입 체인 취약점 이 POC는 실제 [email protected] 취약 코드를 사용하여 CVE-2025-55182를 시연합니다. 빠른 시작 Install dependencies npm install Start vulnerable server port 3002 npm start Run RCE exploit npm run exploit 예상 출력 === CVE-2025-55182 - RCE via vm.runInThisContext ===...