cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Security Analysis Overview This project is a technical analysis of CVE-2025-55182, a critical Remote Code Execution RCE vulnerability disclosed in December 2025. The vulnerability affects React Server Components and allows attackers to execute arbitrary code via...

cve-2025-55182-poc

CVE-2025-55182 React2Shell Vulnerability Analysis Lab This repository contains a complete environment for analyzing and reproducing CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components RSC affecting React 19.x and Next.js 15.x. ⚠️ WARNING: This project...

cve-2025-55182-analysis

CVE-2025-55182 — React 服务端组件 RCE 分析 Web 应用程序漏洞分析 · M2 网络安全 · 2025 作者：Niane Mohamed · LinkedIn React 服务端组件中一个严重（CVSS 10.0）不安全反序列化漏洞的端到端利用链，涵盖从侦察到未授权远程代码执行的完整流程，并附带完整的修复路线图。 ⚠️ 道德免责声明 本研究针对一个刻意构建为易受攻击的实验室应用程序 ，用于演示该 CVE。所有测试均在隔离的虚拟网络 中进行，与生产系统、真实用户数据或第三方服务无任何连接。 请勿 对您不拥有或未获得明确书面授权测试的系统运行这些技术。 请勿...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start root@kitploit: Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3...

CVE-2025-55182-React2Shell-CVSS-10.0-

Affected Software: React Server Components versions 19.0.0, 19.1.0, 19.1.1, 19.2.0 Vulnerability Type: Pre-authentication Remote Code Execution via insecure deserialization. Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serializ...

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

react2shell

React2Shell CLI tool + Nuclei templates for detecting two critical RCE vulnerabilities in React Server Components and Next.js Server Actions. The scanner was rewritten based on the disclosed react2shell vuln. Vulnerability Overview CVE-2025-55182 – React Server Components Deserialization RCE A fl...

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool 一个强大的利用工具，用于检测和利用 Next.js React Server Components 中的 CVE-2025-55182 漏洞。该工具允许在存在漏洞的 Next.js 应用程序中远程执行命令（RCE），并内置了 WAF 绕过功能 。 概述 CVE-2025-55182 是 Next.js React Server Components 中的一个高危漏洞，允许远程攻击者在存在漏洞的服务器上执行任意命令。该工具提供了一种自动化的方式来检测和利用此漏洞。 特性 远程命令执行：在存在漏洞的 Next.js 服务器上执行任意命令 WAF...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Advanced React Server Components RCE Exploit & Assessment Framework...

CVE-2025-55182_PoC

CVE-2025-55182 - React Server Components RCE PoC Author: rl0x01 Description CVE-2025-55182 is a critical CVSS 10.0 Remote Code Execution RCE vulnerability affecting React Server Components via the Flight protocol. Vulnerable Versions...

CVE-2025-55182

CVE-2025-55182 RCE Self-use checking tool for CVE-2025-55182 vulnerability Vulnerability Principle React Server Components has a path resolution flaw when decoding payloads sent to server function endpoints. It uses colon-separated object properties to implement nested value access e.g., $1🅰️b...

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

JEFAZO-CVE-2025-55182-Checker

JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

React4Shell

React2Shell Exploit Proof of Concept PoC for React Server Components RSC / Next.js Remote Code Execution vulnerability. Description A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following...

React2Shell-Scanner

🔬 React2Shell Scanner 面向 React 和 Next.js 应用程序的 Web 应用安全评估框架 ⚠️ 重要声明 此工具仅用于授权安全测试。 ✅ 授权渗透测试 ✅ 范围内的漏洞赏金计划 ✅ 获得许可的安全研究 ✅ 测试您自己的应用程序 ❌ 未经授权的访问尝试 ❌ 未经明确许可的测试 用户须自行负责确保遵守所有适用法律。 📋 简介 React2Shell Scanner 是一个命令行安全评估框架，旨在帮助安全专业人员识别 React 和 Next.js Web 应用程序中的潜在漏洞。它专注于分析 React Server Components RSC...