CVE-2025-55182-POC-NEXTJS

CVE-2025-55182 React2Shell - Proof of Concept PoC This is a commercial, non-free Proof-of-Concept. Purchase Link: https://bit.ly/44G0ani Overview This repository contains a reliable, high-fidelity Proof-of-Concept PoC exploit for CVE-2025-55182 , also known as React2Shell. This is a critical CVSS...

React2Shell

RSC Sentinel Una extensión de Firefox para detectar vulnerabilidades React2Shell CVE-2025-55182 y CVE-2025-66478 en aplicaciones web. 👁️ Descripción general RSC Sentinel es una extensión de navegador Firefox para investigadores y educadores de seguridad que desean observar los indicadores de React...

React Server Components - Remote Code Execution

React Server Components 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack contain a remote code execution caused by unsafe deserialization of payloads from HTTP requests to Server Function endpoints, letting...

CVE-2025-55182-React2Shell

React2Shell React2Shell is a proof-of-concept PoC exploit demonstrating a CRITICAL remote code execution RCE vulnerability in modern web frameworks using React Server Components RSC. This PoC targets CVE-2025-55182 , a CVSS 10.0 vulnerability that allows to execute arbitrary system commands via...

CVE-2025-55182

CVE-2025-55182 — React2Shell: Advanced Exploit & Master's Thesis Research -brightred Deserialization of Untrusted Data + Prototype Pollution in React Server Components Unauthenticated Remote Code Execution via Next.js Server Actions Affected: React 19.0.0 - 19.2.0 · Patch: React 19.0.1 / 19.1.2 /...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...

react2shell-CVE-2025-55182-poc

CVE-2025-55182 React2Shell PoC with WAF Bypass A clean, reliable Python proof-of-concept exploit for CVE-2025-55182 aka React2Shell, a critical remote code execution vulnerability in React Server Components used by Next.js App Router and similar frameworks. This PoC includes dynamic WAF bypass...

flight-risk

flight-risk flight risk /flaɪt rɪsk/ — React's Flight protocol is the serialization layer behind React Server Components. CVE-2025-55182 exploits a deserialization flaw in Flight to achieve pre-auth RCE. If your app uses RSC, it's a flight risk. Security toolkit for CVE-2025-55182 React2Shell — a...

react2shell-scanner

🚨 React2Shell Scanner CVSS 10.0 RCE in React Server Components. Is your React 19 app vulnerable? Fast, accurate scanner for CVE-2025-55182 React2Shell - a critical remote code execution vulnerability exploited in the wild. Zero false positives with intelligent Server Components detection. 🚨 About...

CVE-2025-55182

CVE-2025-55182 If you're looking for an actual explanation, msanft/CVE-2025-55182 has a nice one with a working PoC. This repository only contains some things I tried, which yielded interestingish results. ./thing.py now contains a working PoC, most of which was taken from...

React2P4IM0Nshell

React2P4IM0Nshell 💥Extension Tool para Auditoría y Explotación avanzada RCE/Source Leak/Dos CVE-2025-55182/83/84 para entornos Next.js y React Server Components RSC directamente desde tu navegador, con terminal linux incorporada en la propia extension para resibir cualquier reverse shell ❌ ⚡...

react2shell

React2Shell A CLI tool to exploit prototype pollution vulnerabilities in React Server Components / Server Actions CVE-2025-55182 & CVE-2025-66478, enabling remote code execution RCE on vulnerable servers. Original PoC : https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc WARNING:...

react2shell-scanner

react2shell-scanner A high-fidelity command-line vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 Remote Code Execution in Next.js applications using React Server Components RSC. 🚨 Vulnerability Overview These critical vulnerabilities affect Next.js applications using React...

CVE-2025-55182

CVE-2025-55182: React2Shell - Kit de ejecución remota de código para Next.js !WARNING Esta herramienta se proporciona únicamente para pruebas autorizadas y fines educativos. El acceso no autorizado a redes y la exfiltración de datos son ilegales. Los usuarios son responsables de asegurarse de...

Unihackers---CVE-2025-55182-

ITALIAN GANG React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution...

EXPLOIT-CVE-2025-55182

CVE-2025-55182 Proof of Concept Overview A practical demonstration of CVE-2025-55182 React2Shell - a critical RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Type : Remote Code Execution via Prototype Pollution CVSS : 9.8 CRITICAL Affected : React...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

React2shell-CVE-2025-55182-checker

CVE-2025-55182 React2Shell Detection Tool Detection tools for finding vulnerable React Server Components in your infrastructure. Quick Start root@kitploit: Install dependencies pip3 install requests Version detection passive, safe for production python3 checker.py -u https://your-app.com What's...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

react2shell-scanner-CVE-2025-55182

React2Shell Enterprise Scanner High-fidelity vulnerability scanner for CVE-2025-55182 and CVE-2025-66478 - Remote Code Execution vulnerabilities in React Server Components / Next.js. 📖 For detailed technical analysis, exploit mechanics, and IOC data, seeSECURITY-RESEARCH.md ⚠️ DISCLAIMER This tool...