EUVD-2025-201330

Malicious code in react-icon-updater npm...

MAL-2025-192311 Malicious code in react-icon-updater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755e55af72b70c14edf83bdaea2cbd76dff5c7ab6410f9e3f44f7b521e7248b3 The package react-icon-updater was found to contain malicious code. Source: ghsa-malware...

Exploit for CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit v2.0 A c...

Exploit for CVE-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehens...

Meta React Server Components Remote Code Execution Vulnerability

Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with...

React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 Remote Code Execution (React2Shell)

Binary data reactCVE-2025-55182.nbin...

Critical React Server Components Vulnerability CVE-2025-55182: What Security Teams Need to Know

CVE-2025-55182 is a critical CVSS 10.0 pre-authentication remote code execution vulnerability affecting React Server Components used in React.js, Next.js, and related frameworks see the context section for a more exhaustive list of affected frameworks...

Exploit for CVE-2025-55182

CVE-2025-55182 - Dockerized Proof of Concept This repository...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner React2Shell A community tool to dete...

Exploit for CVE-2025-55182

CVE-2025-55182 Scanner Fast, concurrent vulnerability scanner...

Exploit for CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC pour la vuln de deserialis...

Exploit for CVE-2025-55182

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scann...

Imperva Customers Protected Against React Server Components (RSC) Vulnerability

Overview On December 3, 2025, the React and Next.js teams disclosed a critical security vulnerability CVSS 10.0, identified as React2Shell, affecting applications that leverage React Server Components together with Server Actions or Server Functions. The React2Shell vulnerability stems from...

Exploit for CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python C...

Exploit for CVE-2025-55182

CVE-2025-55182: Critical Pre-Authentication RCE in React Serve...

rsc-rce-poc

React Server Actions RCE Vulnerability - Proof of Concept Cre...

React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components

Overview Update 1: As of 4:30 PM Eastern, December 4, 2025, Rapid7 has validated that a working weaponizedproof-of-concept exploit ,shared by researcher@maple3142 , is now publicly available. Update 2: On December 5, 2025,Lachlan Davidson who discovered the vulnerability has also published...

Remote Code Execution Vulnerability in React and Next.js Frameworks: December 2025

On December 3, 2025, the React team released a security advisory regarding a vulnerability, CVE-2025-55182, in the React server that could allow an unauthenticated, remote attacker to perform remote code execution on an affected device or system. For a description of this vulnerability, see the...

Exploit for CVE-2025-55182

React2Shell Vulnerable Banking Application Lab Deliberately v...

CVE-2025-55182

A flaw was found in the React Server Components RSC protocol in which an attacker could send a malicious package to a Server Function endpoint and cause unauthenticated remote code execution. This is possible due to the way the affected packages deserialized untrusted data...