674 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
Tìm hiểu về React Server Components và giao thức Flight REac...
react2shell-burp v0.1.1
React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...
React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
This is a follow up to CVE-2026-22030 to address related CSRF flows in unstable RSC code paths. !NOTE This only affects your application if you are using the unstable RSC APIs...
Exploit for Deserialization of Untrusted Data in Facebook React
💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗...
EUVD-2025-210506
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
CVE-2025-71389 Cal.com before 5.9.9 Remote Code Execution via RSC
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
CVE-2025-71389 Cal.com before 5.9.9 Remote Code Execution via RSC
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
CVE-2025-71389 Cal.com before 5.9.9 Remote Code Execution via RSC
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth...
react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects
A flaw was found in React Router. This vulnerability, a type of Cross-Site Scripting XSS, affects applications utilizing React Router's unstable React Server Components RSC APIs. A remote attacker could exploit this by sending untrusted redirects, leading to the execution of malicious scripts in...
react2shell-poc
react2shell-poc Proof-of-concept exploit for CVE-2025-55182...
Linux Distros Unpatched Vulnerability : CVE-2026-44576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can ...
react-server-dom-webpack: react-server-dom-parcel: reactreact-server-dom-turbopack: React Server Components: Denial of Service via specially crafted HTTP requests
A flaw was found in React Server Components. A remote attacker can exploit this vulnerability by sending specially crafted HTTP requests to Server Function endpoints. This can lead to a Denial of Service DoS, causing server crashes, out-of-memory exceptions, or excessive CPU usage, thereby...
Exploit for Deserialization of Untrusted Data in Facebook React
Mô phỏng khai thác React2Shell CVE-2025-55182 Lưu ý: -...
Exploit for Deserialization of Untrusted Data in Facebook React
🛡️ React2Shell CTF 🚀 !Securityhttps://img.shields.io/badge...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell Unauthenticated RCE in React S...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell Critical pre-authentication Remo...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 - React2Shell Pre-authentication RCE in Reac...