Lucene search
K

477 matches found

GithubExploit
GithubExploit
added 2025/12/26 2:19 p.m.144 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner – CVE-2025-55182 🔐 Ferramenta educacion...

10CVSS7AI score0.84489EPSS
Exploits362
GithubExploit
GithubExploit
added 2025/12/24 9:6 p.m.141 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner High Fidelity Detection for RSC/Next.js R...

10CVSS7.5AI score0.84489EPSS
Exploits376
GithubExploit
GithubExploit
added 2025/12/20 8:33 a.m.206 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell PoC CVE-2025-55182 A Proof-of-Concept PoC scr...

10CVSS8.9AI score0.84489EPSS
Exploits362
GithubExploit
GithubExploit
added 2025/12/20 12:14 a.m.154 views

Exploit for Deserialization of Untrusted Data in Facebook React

Node.js RCE Mitigation: DevOps as the Last Line of Defense Th...

10CVSS8.5AI score0.84489EPSS
Exploits362
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/19 9:14 p.m.12 views

Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities

Summary Components with known vulnerabilities were addressed in a IBM User Entity Behavior Analytics app release Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and...

10CVSS7.8AI score0.84489EPSS
Exploits372Affected Software1
GithubExploit
GithubExploit
added 2025/12/19 5:6 p.m.175 views

Exploit for Deserialization of Untrusted Data in Facebook React

RSC Detector - React Server Components Vulnerability Scanner...

10CVSS7.6AI score0.84489EPSS
Exploits362
GithubExploit
GithubExploit
added 2025/12/19 11:40 a.m.139 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell: CVE-2025-55182 – Comprehensive Vulnerability Scan...

10CVSS7.3AI score0.84489EPSS
Exploits362
GithubExploit
GithubExploit
added 2025/12/19 10:17 a.m.116 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js React2Shell CVE-2025-55182 Exploit Tool A proof-of-...

10CVSS8.1AI score0.84489EPSS
Exploits376
GithubExploit
GithubExploit
added 2025/12/19 4:1 a.m.150 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 POC This repository contains a proof of conce...

10CVSS7AI score0.84489EPSS
Exploits362
Tenable Nessus
Tenable Nessus
added 2025/12/19 12:0 a.m.6 views

Next.js Framework React Server Components DoS (CVE-2025-55184)

The Next.js Framework on the remote host is affected by a denial of service vulnerability: - A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages:...

7.5CVSS6.4AI score0.41239EPSS
Exploits10References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/18 4:41 p.m.9 views

Security Bulletin: MANTA Automated Data Lineage for IBM Cloud Pak for Data is vulnerable to Critical Security Vulnerability in React Server Components CVE-2025-55182

Summary MANTA Automated Data Lineage for IBM Cloud Pak for Data is affected by React Server Components CVE-2025-55182. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1...

10CVSS7.9AI score0.84489EPSS
Exploits362Affected Software1
GithubExploit
GithubExploit
added 2025/12/18 2:49 a.m.121 views

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-scanner-bypasswaf A command-line tool for detecti...

10CVSS7.4AI score0.84489EPSS
Exploits376
GithubExploit
GithubExploit
added 2025/12/17 12:45 a.m.198 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell PoC This repository provides a minimal intentiona...

10CVSS8AI score0.84489EPSS
Exploits383
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/16 10:22 p.m.10 views

Security Bulletin: React Server Components RCE (CVE-2025-55182) and related advisories

Summary React Server Components RCE vulnerability. Carbon React and related Carbon React based libraries are not related to this CVE. However, many product teams may depend on the affected libraries via frameworks or plugins. We strongly encourage all teams to verify and upgrade any affected...

10CVSS8.1AI score0.84489EPSS
Exploits362Affected Software1
Snyk
Snyk
added 2025/12/16 6:44 p.m.1 views

Directory Traversal

Overview @vitejs/plugin-rsc is a React Server Components RSC support for Vite. Affected versions of this package are vulnerable to Directory Traversal via the /viterscfindSourceMapURL endpoint when processing HTTP requests containing a file:// URL in the filename query parameter. An attacker can...

8.7CVSS7.5AI score0.0118EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/16 6:20 p.m.2 views

EUVD-2025-203834

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Prior to version 0.5.8, the /viterscfindSourceMapURL endpoint in @vitejs/plugin-rsc allows unauthenticated arbitrary file read during development mode. An attacker can read any file accessible to the Node.js process by sendi...

7.5CVSS6.5AI score0.0118EPSS
Exploits0References5
GithubExploit
GithubExploit
added 2025/12/16 4:13 p.m.218 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478...

10CVSS8.3AI score0.84489EPSS
Exploits376
GithubExploit
GithubExploit
added 2025/12/16 9:25 a.m.145 views

Exploit for Deserialization of Untrusted Data in Facebook React

FiberBreak Exploitation tool for CVE-2025-55182 React2Shell...

10CVSS8.2AI score0.84489EPSS
Exploits362
GithubExploit
GithubExploit
added 2025/12/16 1:3 a.m.131 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js CVE-2025-55182 Proof of Concept This is a proof-of-co...

10CVSS8.2AI score0.84489EPSS
Exploits362
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/15 11:12 p.m.10 views

Security Bulletin: QRadar Suite Software includes components with a known vulnerability

Summary QRadar Suite Software includes components with a known vulnerability in React Server Components. This has been addressed in the update. Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versio...

10CVSS7.8AI score0.84489EPSS
Exploits362Affected Software1
Rows per page
Query Builder