7050 matches found
@4399ywkf/router (>=0.0.1, <=0.0.4), @akash-aw/aw-wizard-forms (4.14.0) +129 more potentially affected by CVE-2025-55183 +1 more via @modern-js/utils (>=2.65.2, <=2.69.2)
@modern-js/utils NPM version =2.65.2, =0.0.1, =1.0.0, =1.0.0, =0.44.0, =2.23.0, =0.3.53, =1.0.1, =0.30.0, =0.3.0-alpha.1, =0.4.3, =1.3.0, =2.0.0 and more Source cves: CVE-2025-55183, CVE-2025-55184 Source advisory: SNYK:JS-MODERNJSUTILS-15120606...
Deserialization of Untrusted Data
Overview @modern-js/utils is a progressive web framework based on React. Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to unsafe deserialization of payloads from HTTP requests to Server Function endpoints. An attacker can cause the server process to ent...
Exploit for Deserialization of Untrusted Data in Facebook React
🚀 R2S - Next.js RSC Exploit Framework !Versionhttps://im...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.js React Server Components RCE Exploit Exploits CVE-2025...
CVE-2025-55183 and CVE-2025-55184: Mitigating React/Next.js Vulnerabilities
...
EUVD-2025-202631
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 A simp...
Exploit for Deserialization of Untrusted Data in Facebook React
This is a Next.js project bootstrapped wit...
Exploit for Deserialization of Untrusted Data in Facebook React
💥 React2Shell-POC 💥 !pythonhttps://img.shields.io/badge/py...
Mozilla Thunderbird < 140.6
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-96 advisory. - Privilege escalation in the Netmonitor component. This vulnerability affects Firefox 146, Firefox ESR...
@dockstat/plugin-builder (>=1.0.3, <=1.0.10), @dockstat/typings (>=1.1.0, <=1.1.2) +9 more potentially affected by CVE-2025-66456 via elysia (>=1.4.3-beta.0, <=1.4.16)
elysia NPM version =1.4.3-beta.0, =1.0.3, =1.1.0, =0.1.29, =0.0.21-alpha.3, =2.0.0, =1.2.4, =0.0.1, =1.4.3, =0.1.0, =0.6.0 - nautika-types 1.6.0 Source cves: CVE-2025-66456 Source advisory: SNYK:JS-ELYSIA-14287465...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell /$$$$$$$...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Advanced Scanner A full-featured exploitation ut...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Scanner Simple command-line tool for detecting...
Exploit for Deserialization of Untrusted Data in Facebook React
react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-664...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Vulnerability Scanner A safe, non-invasive scanne...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182: Exploitation Artifacts An export of a small s...
Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT
Cybersecurity researchers are calling attention to a new campaign dubbed JSSMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named NetSupport RAT. The attack chain, analyzed by Securonix, involves three main moving parts: An...