React2Shell-Toolbox

React2Shell Toolbox Un conjunto de herramientas de pruebas de seguridad construido con Electron + Vue 3, enfocado en la detección y explotación de vulnerabilidades en React Server Actions. 中文文档 | Inglés Descripción general React2Shell Toolbox es una herramienta de pruebas de seguridad diseñada pa...

CVE-2025-55182-React2Shell-Async-Scanner

⚡ React2Shell CVE-2025-55182 / CVE-2025-66478 - Escáner de RCE Asíncrono Envenenamiento de prototipos → Ejecución Remota de Código a través de React Server Actions...

CVE-2025-55182-shellinteractive

CVE-2025-55182-shellinteractive Base utilizada de: https://github.com/Emiyelbarto/CVE-2025-55182-PoC Muchas gracias por la gran contribución. Descripción general CVE-2025-55182 es una vulnerabilidad de deserialización en Next.js/React Server Components que permite a atacantes remotos no...

R2SAE

R2SAE - React2Shell Auto-Exploit Una extensión de Firefox para detectar y explotar CVE-2025-55182 Vulnerabilidad de contaminación de prototipos en React Server Actions Características • Instalación • Uso • Aviso legal ⚠️ Aviso legal Esta herramienta es únicamente para pruebas de seguridad...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...

CVE-2025-55183

CVE-2025-55183 Escáner para la vulnerabilidad de exposición del código fuente de React Server Functions. ¿Qué es esto? CVE-2025-55183: Las Server Actions de React 19.0.0-19.2.1 pueden ser explotadas para exponer su código fuente completo, incluyendo secretos hardcodeados, claves API y credenciale...

Exploit for Deserialization of Untrusted Data in Facebook React

R2SAE - React2Shell Auto-Exploit A Firefox extension...

Cross-site Request Forgery

React Router is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to missing CSRF protections on document POST requests to UI routes, where server-side route action handlers or React Server Actions accept authenticated POST requests without origin validation, allowing...

CVE-2026-22030

React Router is a router for React. In @remix-run/server-runtime version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when...

GHSA-H5CW-625J-3RXH React Router has CSRF issue in Action/Server Action Request Processing

React Router or Remix v2 is vulnerable to CSRF attacks on document POST requests to UI routes when using server-side route action handlers in Framework Mode, or when using React Server Actions in the new unstable RSC modes. !NOTE This does not impact your application if you are using Declarative...

Exploit for Deserialization of Untrusted Data in Facebook React

R2SAE - React2Shell Auto-Exploit A Firefox extension...

Exploit for Deserialization of Untrusted Data in Facebook React

🧨 React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Vulnerability Exploitation Tool Rust Version...

rsc-rce-poc

React Server Actions RCE Vulnerability - Proof of Concept Cre...