146 matches found
CVE-2025-13984 Next.js - Critical - Access bypass - SA-CONTRIB-2025-122
Permissive Cross-domain Security Policy with Untrusted Domains vulnerability in Drupal Next.Js allows Cross-Site Scripting XSS.This issue affects Next.Js: from 0.0.0 before 1.6.4, from 2.0.0 before 2.0.1...
Denial Of Service (DoS)
Next.js is vulnerable to a Denial of Service DoS vulnerability. The vulnerability is due to unbounded request body buffering and unbounded decompression in the Partial Prerendering PPR resume endpoint, which allows an attacker to send specially crafted unauthenticated POST requests or compressed...
CVE-2025-59471
A denial of service vulnerability exists in self-hosted Next.js applications that have remotePatterns configured for the Image Optimizer. The image optimization endpoint /next/image loads external images entirely into memory without enforcing a maximum size limit, allowing an attacker to cause...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell Vulnerability Target Vulnerab...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Go Version React2Shell is a high-performance vu...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Vulnerability Detection and Exploitation Tool...
CVE-2022-23646
Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface UI Misrepresentation of Critical Information. In order to be affected, the next.config.js file must have an images.domains array assigned and the image host assigned in...
Exploit for Deserialization of Untrusted Data in Facebook React
🔍 React2Shell Dork Scanner ---...
Exploit for Deserialization of Untrusted Data in Facebook React
⚡ React2Shell Exploit PoC CVE-2025-66478 Next.js Remote...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.js CVE-2025-55182 Proof of Concept This is a proof-of-co...
unauthenticated remote code execution vulnerability in React Server Components. React (CVE-2025-55182), Next.js (CVE-2025-66478).
CVE-2025-55182 Description: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable co...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell – Advanced Discovery & Exploitation Framework An...
Exploit for Deserialization of Untrusted Data in Facebook React
react2shell-scanner A command-line tool for detecting CVE-202...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 This is the exploit code for a Remote Code E...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell Exploit Overview CVE-2025-55...
Exploit for Deserialization of Untrusted Data in Facebook React
fix-react2shell A CLI tool to detect and fix the critical C...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 React2Shell 취약점 실습 사용된 AI : Claude Opus 4.5...
Exploit for CVE-2025-66478
CVE-2025-66478 Vulnerability Demo This repository contains a...