843 matches found
fix-react2shell-next
fix-react2shell-next One command to fix CVE-2025-66478 React 2 Shell RCE in your Next.js / React RSC app. npx fix-react2shell-next Deterministic version bumps per the official advisories. What it does 1. Recursively scans all package.json files handles monorepos 2. Checks for vulnerable versions...
CVE-2025-55182
RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension CVE-2025-55182 & CVE-2025-66478 This repository contains a security research toolkit designed to detect and demonstrate PoC the recently disclosed RCE vulnerabilities affecting React Server Components RSC / Next.js. The toolkit include...
RSC-Detect-CVE-2025-55182
π RSC-Detect - React Server Components Detector Lightweight detection utility for identifying React Server Components and Next.js applications π― Purpose RSC-Detect is a simple, focused tool designed to identify websites using React Server Components RSC and Next.js framework. It's useful for:...
nextjs-rce-incident-response
Next.js RCE Incident Response β CVE-2025-55182 Type: Live Production Incident Response Vulnerability: CVE-2025-55182 β React Server Components Insecure Deserialization RCE Affected System: Next.js frontend + remote production server Role: Cyber Security Intern β SenseLive Technologies Date:...
CVE-2025-55182
CVE-2025-55182 Vulnerable Application Build and run: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC from https://github.com/msanft/CVE-2025-55182: node poc.js Experimentation with...
react2shell-burp
React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 β a pre-authentication remote code execution flaw in React Server Components. The extension...
R2S_CVE-2025-55182
CVE-2025-55182 Scanner Vulnerability scanner for CVE-2025-55182 - Remote Code Execution in Next.js Server Actions. About CVE-2025-55182 Severity: Critical CVSS TBD Affected Versions: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impact: Remote attackers can execute...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...
cve-2025-55182-lab
CVE-2025-55182 RSC lab intentionally vulnerable Local Docker lab for authorized security research: React Server Components / Next.js App Router with a stack in the CVE-2025-55182 React2Shell affected range. Use only on your own machine. Do not expose this container to the internet. References Rea...
CVE-2025-55182-mass
CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation chmod +x scanner.sh && chmod +x automate.sh Usage Scan with default command id bash automate.sh -l domains.txt Disclaimer This tool is for...
CVE-2025-55182-poc
CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. Quick Start Install dependencies npm install Start vulnerable server port 3002 npm start Run RCE exploit npm run exploit Expected Output...
CVE-2025-55182
CVE-2025-55182 Exploit A simple python script that exploits the vulerability in React Server Components in CVE-2025-55182 by injecting a shell in the application. The script is tested on Next.js version 16.0.6 Usage Clone the repository git clone https://github.com/ahmedshamsddin/CVE-2025-55182 R...
PoC-RCE-CVE-2025-55182
π₯ RSC RCE Exploit Toolkit Advanced exploitation toolkit for React Server Components Remote Code Execution vulnerabilities For authorized penetration testing and security research only Features β’ Installation β’ Usage β’ Shodan Integration β’ Examples β’ Disclaimer π Table of Contents Overview...
CVE-2025-55182
π CVE-2025-55182 β React2Shell Critical Unauthenticated Remote Code Execution RCE in React Server Components π Overview CVE-2025-55182, informally dubbed React2Shell, is a critical remote code execution RCE vulnerability disclosed on December 3, 2025 in React Server Components RSC and related...
cve-2025-66478
CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...
CVE-2025-55182-NextJS-Scanner-React2Shell-PoC
CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...
cve-2025-55182-poc-test
CVE-2025-55182 Demonstration Lab Next.js / React RSC RCE This document provides a complete and reproducible setup for demonstrating CVE-2025-55182 Remote Code Execution RCE against a vulnerable Next.js + React Server Components environment running inside a Multipass Ubuntu VM. The exploit is...
React2Shell-Vulnerability-Verification-Script
React2Shell Vulnerability Verification Script verifyreactvulnerability.py What is this script? This is a simple, standalone Python script created to help you quickly determine if your project is affected by the critical React2Shell vulnerability also known as CVE-2025-55182. It performs a two-lev...
RSC_Detector
RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. β οΈ Important Notice This extension is designed for educational and security research purposes only. It includes functionality that could be used to test for...
CVE-2025-55182
React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...