Lucene search
+L

5098 matches found

Vulnrichment
Vulnrichment
added 2025/12/09 8:54 p.m.2 views

CVE-2025-67489 @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...

9.8CVSS7.8AI score0.00722EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/09 8:54 p.m.23 views

CVE-2025-67489 @vitejs/plugin-rsc Remote Code Execution through unsafe dynamic imports in RSC server function APIs on development server

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...

9.8CVSS0.00722EPSS
SaveExploits0References2
Metasploit
Metasploit
added 2025/12/09 6:55 p.m.771 views

Unauthenticated RCE in React Server Components (React2Shell)

A critical unauthenticated Remote Code Execution RCE vulnerability exists in React Server Components RSC Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with "proto",...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/09 5:19 p.m.192 views

Exploit for Deserialization of Untrusted Data in Facebook React

fix-react2shell A CLI tool to detect and fix the critical C...

10CVSS8.1AI score0.99616EPSS
SaveExploits394
GithubExploit
GithubExploit
added 2025/12/09 5:7 p.m.180 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell /$$$$$$$...

10CVSS7.3AI score0.99616EPSS
SaveExploits394
GithubExploit
GithubExploit
added 2025/12/09 5:3 p.m.188 views

Exploit for Deserialization of Untrusted Data in Facebook React

Hunting for CVE-2025-55182 Using Open Source Intelligenc...

10CVSS6.8AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 2:5 p.m.212 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURIT...

10CVSS8.4AI score0.99616EPSS
SaveExploits380
CISA
CISA
added 2025/12/09 12:0 p.m.15 views

CISA Adds One Known Exploited Vulnerability to Catalog

Updated December 9, 2025: Check for signs of potential compromise on all internet accessible REACT instances after applying mitigations. For more information, see React Blog: Critical Security Vulnerability in React Server Componentslink is external. CISA has added one new vulnerability to its...

10CVSS7.8AI score0.99616EPSS
SaveIn wildExploits380References7
GithubExploit
GithubExploit
added 2025/12/09 11:46 a.m.152 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React Server Components RCE Exploit USAGE: C...

10CVSS7.2AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 11:9 a.m.170 views

Exploit for Deserialization of Untrusted Data in Facebook React

c...

10CVSS7.1AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 11:9 a.m.198 views

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ RSC Sentinel Pro Advanced React Server Components R...

10CVSS6.8AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 11:7 a.m.189 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner !Pythonhttps://img.shields.i...

10CVSS8.4AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 10:49 a.m.163 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Python Exploit Python 3 script that can be use...

10CVSS7.9AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 10:41 a.m.161 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner A full-featured exploitation ut...

10CVSS7.9AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 10:26 a.m.172 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell A scanner for detecting and exploiting Next.js...

10CVSS7.3AI score0.99616EPSS
SaveExploits394
GithubExploit
GithubExploit
added 2025/12/09 9:53 a.m.186 views

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-C...

10CVSS7AI score0.99616EPSS
SaveExploits380
Hacker One
Hacker One
added 2025/12/09 9:43 a.m.28 views

IBM: [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182

Vulnerability description not provided...

10CVSS7.6AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 9:39 a.m.185 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Scanner Simple command-line tool for detecting...

10CVSS7.4AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 9:17 a.m.212 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔥 RSC RCE Exploit Toolkit !Versionhttps://img.shields.io...

10CVSS8.7AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/09 7:55 a.m.216 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell !Languagehttps://img.shields.io/badge/Language...

10CVSS8.6AI score0.99616EPSS
SaveExploits380
Rows per page
Query Builder