Lucene search
+L

674 matches found

Kitploit
Kitploit
added 2026/09/06 8:19 p.m.5 views

CVE-2025-55182

CVE-2025-55182 React Server Components Remote Code Execution CVE-2025-55182 and Next.js Remote Code Execution CVE-2025-66478. This vulnerability primarily affects the Server Actions functionality in react-server-dom-webpack. Due to missing security validation when parsing client-submitted forms, ...

10CVSS7.8AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 8:12 p.m.8 views

PoC-CVE-2025-55182

PoC: CVE-2026-33017 A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code...

10CVSS7.7AI score0.99802EPSS
SaveExploits421
Kitploit
Kitploit
added 2026/09/06 5:27 p.m.6 views

CVE-2025-66478-PoC-Reverse-Shell

CVE-2025-66478 / CVE-2025-55182(“React2Shell”)— RSC 服务器操作反序列化 RCE PoC 针对 CVE-2025-55182 的概念验证漏洞利用程序——公开昵称为 “React2Shell” ——这是 React 服务器组件中服务器操作反序列化 (react-server-dom-webpack / -parcel / -turbopack)的一个服务器端原型污染漏洞, Next.js 将其跟踪为 CVE-2025-66478 (被 NVD 以重复为由拒绝, 但仍是讨论该漏洞对 Next.js 具体影响时常用的标识符)。 一个精心构造的...

10CVSS7.5AI score0.99802EPSS
SaveExploits403
Kitploit
Kitploit
added 2026/09/06 4:33 p.m.4 views

cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Security Analysis Overview This project is a technical analysis of CVE-2025-55182, a critical Remote Code Execution RCE vulnerability disclosed in December 2025. The vulnerability affects React Server Components and allows attackers to execute arbitrary code via...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 4:30 p.m.7 views

cve-2025-55182-poc

CVE-2025-55182 React2Shell Vulnerability Analysis Lab This repository contains a complete environment for analyzing and reproducing CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting React 19.x and Next.js 15.x. ⚠️ WARNING: This project...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 3:03 p.m.2 views

cve-2025-55182-analysis

CVE-2025-55182 — React Server Components RCE Analysis Web application vulnerability analysis · M2 Cybersecurity · 2025 Author: Niane Mohamed · LinkedIn End-to-end exploitation chain of a critical CVSS 10.0 insecure deserialization vulnerability in React Server Components, from reconnaissance to...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 12:01 p.m.5 views

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 11:55 a.m.4 views

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start root@kitploit: Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3...

10CVSS7.6AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 11:09 a.m.4 views

CVE-2025-55182-React2Shell-CVSS-10.0-

Affected Software: React Server Components versions 19.0.0, 19.1.0, 19.1.1, 19.2.0 Vulnerability Type: Pre-authentication Remote Code Execution via insecure deserialization. Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serializ...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:58 a.m.6 views

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

10CVSS7.6AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:48 a.m.5 views

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:48 a.m.5 views

react2shell

React2Shell CLI tool + Nuclei templates for detecting two critical RCE vulnerabilities in React Server Components and Next.js Server Actions. The scanner was rewritten based on the disclosed react2shell vuln. Vulnerability Overview CVE-2025-55182 – React Server Components Deserialization RCE A fl...

10CVSS6AI score0.99802EPSS
SaveExploits403
Kitploit
Kitploit
added 2026/09/06 10:43 a.m.6 views

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:02 a.m.7 views

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 8:07 a.m.5 views

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool A powerful exploit tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js React Server Components. This tool allows remote command execution RCE in vulnerable Next.js applications with built-in WAF bypass capabilities. Overview CVE-2025-55182 is a critic...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 7:23 a.m.6 views

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework...

10CVSS7.4AI score0.99802EPSS
SaveExploits389References2
Kitploit
Kitploit
added 2026/09/06 7:10 a.m.8 views

CVE-2025-55182_PoC

CVE-2025-55182 - React Server Components RCE PoC Author: rl0x01 Description CVE-2025-55182 is a critical CVSS 10.0 Remote Code Execution RCE vulnerability affecting React Server Components via the Flight protocol. Vulnerable Versions...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 6:25 a.m.4 views

CVE-2025-55182

CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 6:24 a.m.4 views

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

10CVSS7.5AI score0.99802EPSS
SaveExploits389References3
Kitploit
Kitploit
added 2026/09/06 4:59 a.m.7 views

JEFAZO-CVE-2025-55182-Checker

JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...

10CVSS7.4AI score0.99802EPSS
SaveExploits389
Rows per page
Query Builder