fix-react2shell-next

fix-react2shell-next Un comando para corregir CVE-2025-66478 React 2 Shell RCE en tu aplicación Next.js / React RSC. root@kitploit: npx fix-react2shell-next Incrementos de versión deterministas según los avisos oficiales. Qué hace 1. Escanea recursivamente todos los archivos package.json admite...

CVE-2025-55182-React2Shell-Async-Scanner

⚡ React2Shell CVE-2025-55182 / CVE-2025-66478 - Async RCE Scanner Prototype-pollution → Remote Code Execution via React Server Actions Async, version-first, output-based canary detection - no blind guessing !WARNING For authorised security research and penetration testing only. Scanning systems...

CVE-2025-55182

React2Shell Vulnerability - CVE-2025-55182 📓 Introduction This vulnerability, known as React2Shell, was discovered in December 2025 and affects components of next.js with CVSS 10.0. With a simple POST request, it's possible to obtain an critical unauthenticated RCE. Below are the versions affecte...

CVE-2025-55182-analysis

I. Vulnerability Overview In the past couple of days, there has been widespread discussion about a deserialization RCE vulnerability in React. The official CVSS score is a full 10.0, on par with Log4j. Rumors quickly spread claiming it is the "Log4j of modern frontend," causing panic among...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Overview This repository documents the security concepts studied in the TryHackMe room regarding CVE-2025-55182 , a critical vulnerability affecting: React Server Components RSC Next.js and RSC-based frameworks Packages: react-server-dom-webpack react-server-dom-parce...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 Tentang Kerentanan React2Shell adalah kerentanan Remote Code Execution RCE kritikal yang mempengaruhi: Target| Versi Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️...

CVE-2025-55182

CVE-2025-55182 - React2Shell A modified and boosted exploit for CVE-2025-55182 a pre-authentication Remote Code Execution in React Server version 19.0, 19.1.0, 19.1.1, and 19.2.0 The vulnerability spans the following: react-server-dom-webpack react-server-dom-parcel react-server-dom-turbopack Pat...

CVE-2025-55182

Understanding React Server Components and the Flight Protocol React Server Components is a feature introduced in React 19 that allows components to be rendered on the server instead of in the client's browser. The server can handle complex computational tasks while only sending the rendered resul...

cve-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container root@kitploit: docker build -t cve-2025-55182:lab...

POC-CVE-2025-55182

Aviso de NoMoreBreach: React2Shell CVE-2025-55182 Gravedad: Crítico CVSS 10.0 Tipo de vulnerabilidad: Ejecución remota de código RCE mediante deserialización Estado: Parcheado 3 dic 2025 Fuente del aviso: NoMoreBreach.com Resumen ejecutivo El equipo de investigación de NoMoreBreach destaca una...

CVE-2025-55182

CVE-2025-55182 - React2Shell Pre-authentication RCE in React Server Components. Summary of the CVE A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the react-server-dom-parcel,...

CVE-2025-55182-realistic-poc

CVE-2025-55182: React Server Components RCE A minimal proof of concept demonstrating the critical Remote Code Execution vulnerability in [email protected]. What is CVE-2025-55182? A pre-authentication RCE vulnerability in React Server Components that allows attackers to execute arbitrary cod...

React2shell-CVE-2025-55182-checker

CVE-2025-55182 React2Shell Detection Tool Detection tools for finding vulnerable React Server Components in your infrastructure. Quick Start root@kitploit: Install dependencies pip3 install requests Version detection passive, safe for production python3 checker.py -u https://your-app.com What's...

CVE-2025-55182

CVE-2025-55182 Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. ⚠️ Disclaimer This document is provided strictly for educational, defensive, and authorized security research purposes. Do NOT attempt to exploit systems or applications without explicit...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing root@kitploit: Unpack src.zip zip -r src.zip src Build an...

CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...

React-site-CVE-2025-55182

React Site - CVE-2025-55182 README: Vulnerable Next.js project React RSC landing page This repository contains an example of a multi-page corporate landing page built with Next.js 15.0.0 + React 19.0.0. The site mimics a structure similar to t1.ru: home, products, cases, media, about, contacts. W...

CVE-2025-55182

CVE-2025-55182 Vulnerable Application Build and run: root@kitploit: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC from https://github.com/msanft/CVE-2025-55182: root@kitploit: node poc.j...

-CVE-2025-55182

🔍 GitHub CVE Scanner - Usage Guide Script to scan GitHub repositories for known vulnerabilities in React and Next.js projects. 📋 Detected Vulnerabilities The scanner checks the following CVEs: CVE-2025-55182 : Vulnerability in React Server Components Affects: React 19.0.0, 19.1.0, 19.1.1, 19.2.0...

React2Shell_Rce-cve-2025-55182

React Server Components RCE – README Good day ,I truly hope everything is awesome on your side of the screen! 😊✨ Description React Server Components versions 19.0.0 , 19.1.0 , 19.1.1 , and 19.2.0 , including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack, contai...