Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...

CVE-2025-68927

creationtimestamp| type| source ---|---|--- 2025-12-15 19:17:13+00:00| published-proof-of-concept| https://github.com/abhinavxd/libredesk/security/advisories/GHSA-wh6m-h6f4-rjf4 2026-01-02 15:08:07+00:00| published-proof-of-concept| Telegram/iY4yZ2PFpGxByFsrgplKVch9nhT5x9DeCvqvBNZo45zgPeM...

CVE-2025-67748

creationtimestamp| type| source ---|---|--- 2025-12-15 18:20:33+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-r7v6-mfhq-g3m2 2026-01-02 18:47:00+00:00| published-proof-of-concept| Telegram/909Vqfy1t-GN-jmnJRhonTHruzsnwKWBWvcbC9dRm7P3pmc...

Exploit for Deserialization of Untrusted Data in Facebook React

Exploitest This repository serves as a cent...

Exploit for Path Traversal in Rarlab Winrar

CVE-2025-6218-WinRAR-RCE-POC Com...

Exploit for Interpretation Conflict in Git-Scm Git

CVE-2025-48384 PoC This repository demons...

CVE-POC

No d...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 - Proof of Concept A comprehensi...

Exploit for Injection in Dlink Dns-320_Firmware

CVE-2024-10914POC PoC para explota...

CVE-2025-66482

creationtimestamp| type| source ---|---|--- 2025-12-13 10:32:43+00:00| published-proof-of-concept| https://github.com/misskey-dev/misskey/security/advisories/GHSA-wwrj-3hvj-prpm 2026-01-06 20:11:53+00:00| published-proof-of-concept| Telegram/mJFISOaG9sdliiq532xrtHTh4hR6RCcMc304VWQpxZ4gXns...

Exploit for Command Injection in Microsoft

CVE-2025-54100 - PowerShell Response Parsing PoC This reposit...

CVE-2025-43426

creationtimestamp| type| source ---|---|--- 2025-12-12 21:00:07+00:00| published-proof-of-concept| Telegram/z917lPoY4z2i6pdf0d-zy8JTrnC7jL9Rrjt0jECLqNamFjY 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294032 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294016 2026-07-22...

Exploit for CVE-2025-66478

React2Shell POC https://nextjs.org/blog/CVE-2025-66478 테스...

Exploit for Path Traversal in 7-Zip

7-ZiProwler CVE-2025-11001 Overview Result of my qu...

Exploit for CVE-2025-66478

PoC for Next.js Vulnerability. Credits where credits are d...

Exploit for Deserialization of Untrusted Data in Facebook React

REACT2SHELL 🎯 Quick Overview What is this? This tool is...

CVE-2020-0014

creationtimestamp| type| source ---|---|--- 2025-12-12 09:00:05+00:00| published-proof-of-concept| Telegram/EftIdxh0m82pCg23mhioS-smQ0jukHsVEz7My1KFRejYJM...

📄 FlatPress 1.3 Shell Upload

FlatPress version 1.3 remote shell upload proof of concept exploit that leverages a cross site request forgery vulnerability. ============================================================================================================================================= | Title : FlatPress 1.3 shell...

CVE-2025-55816

creationtimestamp| type| source ---|---|--- 2025-12-11 21:00:06+00:00| published-proof-of-concept| Telegram/0R1sh6yTM6RpS889fQ8OVezlutCC6wifTf5dIyVUqSNUZo...

CVE-2025-66470

creationtimestamp| type| source ---|---|--- 2025-12-11 21:00:06+00:00| published-proof-of-concept| Telegram/0R1sh6yTM6RpS889fQ8OVezlutCC6wifTf5dIyVUqSNUZo...