Lucene search
+L

674 matches found

Kitploit
Kitploit
added 2026/09/06 4:33 p.m.4 views

cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Security Analysis Overview This project is a technical analysis of CVE-2025-55182, a critical Remote Code Execution RCE vulnerability disclosed in December 2025. The vulnerability affects React Server Components and allows attackers to execute arbitrary code via...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 4:30 p.m.7 views

cve-2025-55182-poc

CVE-2025-55182 React2Shell Vulnerability Analysis Lab This repository contains a complete environment for analyzing and reproducing CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting React 19.x and Next.js 15.x. ⚠️ WARNING: This project...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 3:03 p.m.2 views

cve-2025-55182-analysis

CVE-2025-55182 — React 服务端组件 RCE 分析 Web 应用程序漏洞分析 · M2 网络安全 · 2025 作者:Niane Mohamed · LinkedIn React 服务端组件中一个严重(CVSS 10.0)不安全反序列化漏洞的端到端利用链,涵盖从侦察到未授权远程代码执行的完整流程,并附带完整的修复路线图。 ⚠️ 道德免责声明 本研究针对一个刻意构建为易受攻击的实验室应用程序 ,用于演示该 CVE。所有测试均在隔离的虚拟网络 中进行,与生产系统、真实用户数据或第三方服务无任何连接。 请勿 对您不拥有或未获得明确书面授权测试的系统运行这些技术。 请勿...

10CVSS7.5AI score0.99802EPSS
SaveExploits389References1
Kitploit
Kitploit
added 2026/09/06 12:01 p.m.5 views

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 11:55 a.m.4 views

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start root@kitploit: Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3...

10CVSS7.6AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 11:09 a.m.4 views

CVE-2025-55182-React2Shell-CVSS-10.0-

Affected Software: React Server Components versions 19.0.0, 19.1.0, 19.1.1, 19.2.0 Vulnerability Type: Pre-authentication Remote Code Execution via insecure deserialization. Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serializ...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:58 a.m.6 views

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

10CVSS7.6AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:48 a.m.5 views

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:48 a.m.5 views

react2shell

React2Shell CLI tool + Nuclei templates for detecting two critical RCE vulnerabilities in React Server Components and Next.js Server Actions. The scanner was rewritten based on the disclosed react2shell vuln. Vulnerability Overview CVE-2025-55182 – React Server Components Deserialization RCE A fl...

10CVSS6AI score0.99802EPSS
SaveExploits403
Kitploit
Kitploit
added 2026/09/06 10:43 a.m.6 views

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 10:02 a.m.7 views

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 8:07 a.m.5 views

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool 一个强大的利用工具,用于检测和利用 Next.js React Server Components 中的 CVE-2025-55182 漏洞。该工具允许在存在漏洞的 Next.js 应用程序中远程执行命令(RCE),并内置了 WAF 绕过功能 。 概述 CVE-2025-55182 是 Next.js React Server Components 中的一个高危漏洞,允许远程攻击者在存在漏洞的服务器上执行任意命令。该工具提供了一种自动化的方式来检测和利用此漏洞。 特性 远程命令执行:在存在漏洞的 Next.js 服务器上执行任意命令 WAF...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 7:23 a.m.6 views

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework...

10CVSS7.4AI score0.99802EPSS
SaveExploits389References2
Kitploit
Kitploit
added 2026/09/06 7:10 a.m.8 views

CVE-2025-55182_PoC

CVE-2025-55182 - React Server Components RCE PoC Author: rl0x01 Description CVE-2025-55182 is a critical CVSS 10.0 Remote Code Execution RCE vulnerability affecting React Server Components via the Flight protocol. Vulnerable Versions...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 6:25 a.m.4 views

CVE-2025-55182

CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...

10CVSS7.5AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 6:24 a.m.4 views

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

10CVSS7.5AI score0.99802EPSS
SaveExploits389References3
Kitploit
Kitploit
added 2026/09/06 4:59 a.m.7 views

JEFAZO-CVE-2025-55182-Checker

JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...

10CVSS7.4AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 4:35 a.m.4 views

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

10CVSS7.6AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/09/06 3:49 a.m.6 views

React4Shell

React2Shell Exploit Proof of Concept PoC for React Server Components RSC / Next.js Remote Code Execution vulnerability. Description A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 12:53 a.m.12 views

React2Shell-Scanner

🔬 React2Shell Scanner 面向 React 和 Next.js 应用程序的 Web 应用安全评估框架 ⚠️ 重要声明 此工具仅用于授权安全测试。 ✅ 授权渗透测试 ✅ 范围内的漏洞赏金计划 ✅ 获得许可的安全研究 ✅ 测试您自己的应用程序 ❌ 未经授权的访问尝试 ❌ 未经明确许可的测试 用户须自行负责确保遵守所有适用法律。 📋 简介 React2Shell Scanner 是一个命令行安全评估框架,旨在帮助安全专业人员识别 React 和 Next.js Web 应用程序中的潜在漏洞。它专注于分析 React Server Components RSC...

5.9AI score
SaveExploits0
Rows per page
Query Builder