CVE-2025-55182

CVE-2025-55182: Vulnérabilité de désérialisation non sécurisée des composants serveur React Aperçu CVE-2025-55182 également connu sous le nom de React2Shell est une grave vulnérabilité de désérialisation non sécurisée découverte dans le protocole React Flight, affectant la charge utile payload de...

CVE-2025-55182

CVE-2025-55182 — React2Shell Pre-Authentifizierung Remote Code Execution in React Server Components RSC, Next.js und verwandten Frameworks. Übersicht CVE-2025-55182 auch bekannt als React2Shell ist eine kritische Pre-Authentifizierung RCE-Schwachstelle, die das React Server Components RSC Ökosyst...

React2Shell

React2Shell CVE-2025-55182 Panoramica Questo repository contiene la mia ricerca sulla CVE-2025-55182, nota anche come vulnerabilità React2Shell. Il repo è composto da due parti principali: stand ed exploit. Riferimenti Alcune informazioni su questa falla di sicurezza: NIST Articolo di HackerOne...

CVE-2025-55182

CVE-2025-55182 यह React Server Functions Next.js आदि में रिमोट कोड एक्ज़ीक्यूशन RCE भेद्यता का प्रदर्शन कोड है। यह प्रोटोटाइप प्रदूषण का दुरुपयोग करके बिना प्रमाणीकरण के सर्वर पर मनमाना कोड निष्पादित कर सकता है। चेतावनी : यह रिपॉजिटरी शैक्षिक और शोध उद्देश्यों के लिए है। दुरुपयोग सख्त वर्जित है।...

CVE-2025-55182

CVE-2025-55182 React2Shell Analysebericht Abschnitte, die gemäß den Aufgabenrichtlinien erforderlich sind, sind mit „Erforderlich“ gekennzeichnet. 1. Umgebung Erforderlich 1.1. Dockerfile Erforderlich Diese Umgebung verwendet ein benutzerdefiniertes Dockerfile basierend auf dem offiziellen Node.j...

FiberBreak

FiberBreak Framework di sfruttamento per CVE-2025-55182 React2Shell - Vulnerabilità RCE critica in React Server Components. Panoramica CVE : CVE-2025-55182 CVSS : 10.0 CRITICO Tipo : Esecuzione remota di codice RCE Versioni interessate : da React 19.0.0-rc.0 a 19.0.0, da Next.js 15.0.0 a 15.0.3...

react2shell-CVE-2025-55182-full-rce-script

أداة استغلال Next.js React2Shell CVE-2025-55182 أداة إثبات مفهوم PoC لعرض الثغرة الحرجة React2Shell CVE-2025-55182 / CVE-2025-66478 على بيئات الاختبار المحلية المصرَّح بها فقط. ⚠️ تحذير حرج: استغلال نشط تُستغل هذه الثغرة درجة 10.0 على مقياس CVSS بنشاط من قبل جهات تهديد متطورة. تشير تقارير...

CVE-2026-23869-Exploit

⚡ CVE-2026-23869 — React2DoS React Flight प्रोटोकॉल के माध्यम से बिना प्रमाणीकरण के रिमोट डिनायल-ऑफ-सर्विस सर्वर कंपोनेंट्स Map डिसीरियलाइज़ेशन में क्वाड्रेटिक CPU थकावट अवलोकन • यह कैसे काम करता है • उपकरण • स्थापना • उपयोग • Nuclei • समाधान • अस्वीकरण भेद्यता अवलोकन फ़ील्ड| विवरण ---|--- CVE ID...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Next.js Remote Code Execution RCE PoC Kritische Schwachstelle in Next.js Server Actions, die eine nicht authentifizierte Remote Code Execution über die Deserialisierung des React Flight Protocol ermöglicht Übersicht Dieses Repository enthält einen Pro...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE NOTE: Written by AI/Claude https://github.com/ejpir/CVE-2025-55182-bypass TL;DR CVE-2025-55182 React के Flight Protocol में एक गंभीर RCE भेद्यता है। यह हमला पाथ ट्रावर्सल + नकली चंक इंजेक्शन + $B हैंडलर दुरुपयोग की श्रृंखला बनाकर Functionattackercode...

CVE-2025-55182

CVE-2025-55182 Оригинальный автор:https://github.com/msanft/CVE-2025-55182 Эта уязвимость позволяет выполнить удалённый код RCE в серверных функциях React, например предоставляемых Next.js, через небезопасные ссылки на прототипы. Я не эксперт в React или Next.js, поэтому относитесь ко всей...

http-react2shell

Script di rilevamento Nmap React2Shell NSE Rilevamento per CVE-2025-55182 / CVE-2025-66478 – React Server Components / Next.js Questo repository contiene uno script Nmap Scripting Engine NSE scritto in Lua progettato per rilevare in modo sicuro la vulnerabilità critica nota come React2Shell, che...

react2shell

React2Shell Strumento CLI + template Nuclei per rilevare due vulnerabilità RCE critiche in React Server Components e Next.js Server Actions. Lo scanner è stato riscritto in base alla vulnerabilità react2shell divulgata. Panoramica delle vulnerabilità CVE-2025-55182 – React Server Components...

CVE-2025-55182-poc

CVE-2025-55182 Vulnerabilità del protocollo React Flight che consente l'attraversamento della catena dei prototipi tramite riferimenti a chunk. Test eseguito contro bullshit-react-project. Rilevamento Questo è leggermente obsoleto dato che il vero PoC è stato ora rivelato. Vite RSC : bash...

react2shell_analyzer

React2Shell Analyzer Un potente analizzatore proxy HTTP per ispezionare il traffico Server Actions di Next.js tra il browser/PoC e il server Next.js. Repository GitHub https://github.com/Benrich127N/react2shellanalyzer.git Caratteristiche 🔍 Ispezione delle intestazioni : Registra tutte le...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell Analysis Report Sections require...

Exploit for CVE-2026-23869

⚡ CVE-2026-23869 — React2DoS Unauthenticated Remote Denial-o...

Exploit for Deserialization of Untrusted Data in Facebook React

React-2025 CTF Lab: CVE-2025-55182 Overview This repositor...

Allocation of Resources Without Limits or Throttling

Overview @modern-js/utils is a progressive web framework based on React. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the decoding reply functions of React Flight protocol. An attacker can cause server crashes, out-of-memory exception...

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the decoding reply functions of React Flight protocol. An attacker can cause server crashes, out-of-memory exceptions, or excessive CPU usage by sending...