PT-2025-49872

Name of the Vulnerable Software and Affected Versions Elysia versions 1.4.0 through 1.4.16 Description Elysia is a Typescript framework used for request validation, type inference, OpenAPI documentation, and client-server communication. The mergeDeep function is susceptible to a prototype polluti...

📄 React / Next.js Unauthenticated Remote Code Execution

A critical unauthenticated remote code execution vulnerability exists in React Server Components RSC Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with proto, constructor, o...

Linux Distros Unpatched Vulnerability : CVE-2025-13204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance mod...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Next.js RCE Exploit Tool 中文文档./README.zh-CN...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 / CVE-2025-66478 Vulnerability Replay Environme...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell 취약점 실습 사용된 AI : Claude Opus 4.5...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Proof-of-Concept This repository contains a Pr...

Exploit for Prototype Pollution in Typeorm

CVE-2020-8158: TypeORM Prototype Pollution Vulnerability O...

Exploit for Deserialization of Untrusted Data in Facebook React

🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478 !R...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner A comprehensive vulnera...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React Server Components RCE - Go PoC ⚠️ FOR...

Exploit for CVE-2025-66478

Next.js CVE-2025-66478 PoC English | 한...

exploit-poc

Node.js Web Server Exploit PoC Node.js 웹서버에서 발생할 수 있는 보안 취약점...

Exploit for CVE-2025-55182

CVE-2025-55182 – React2Shell RCE Summary Remote Code Exec...

Exploit for CVE-2025-55182

CVE-2025-55182-exp 🔥 Overview CVE-2025-55182 is a cri...

Exploit for CVE-2025-55182

Next.js React Server Components RCE Exploit Exploits CVE-2025...

PT-2026-29328

Name of the Vulnerable Software and Affected Versions Lodash versions prior to 4.18.0 Description Lodash versions 4.17.23 and earlier are susceptible to prototype pollution through the .unset and .omit functions. The initial fix did not fully address the issue, as an attacker can bypass the check...

Prototype Pollution zrender Dependency in Jira Service Management Data Center and Server

This is a vulnerability in a non-Atlassian Jira Service Management dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Prototype Pollution vulnerability known as CVE-2022-39227 was introduced in 10.3.0, and 11.0.0 of Jira...

Exploit for Prototype Pollution in Datatables Datatables.Net

CVE-2020-28458 Affected versions of this package are vulnerabl...

Prototype Pollution loadash.pick Dependency Vulnerability in Jira Software Data Center and Server

This High severity Prototype Pollution vulnerability known as CVE-2020-8203 was introduced in 10.3.0 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.4 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H allows an unauthenticated attacker to take...