156 matches found
react2shell-scanner
react2shell-guard Sicherheitsscanner für CVE-2025-55182 – eine kritische CVSS 10.0 nicht authentifizierte Remote-Code-Ausführungs-Sicherheitslücke in React Server Components. ⚠️ HAFTUNGSAUSSCHLUSS Dies ist ein Sicherheitsscanner , KEIN Exploit-Tool. Es soll Entwicklern und Sicherheitsteams helfen,...
React2Shell CVE-2025-55182 Detection
Detects CVE-2025-55182 React2Shell by sending a safe React Flight multipart payload that evaluates 77+1 via the prefix gadget. Positive when the response reflects RSC deserialization behaviour. !/usr/bin/env python3 -- coding: utf-8 -- """Detect React2Shell CVE-2025-55182 on Next.js / React Serve...
Next.js RSC Multi-CVE Chain RCE
Full-chain Next.js RSC exploitation: tries CVE-2025-55182 React2Shell first, then falls back to Next.js-specific RSC endpoints. Integrates detection signals from CVE-2026-44582/44573/44578 auxiliary modules. !/usr/bin/env python3 -- coding: utf-8 -- """Next.js RSC multi-CVE exploit chain...
CVE-2025-55182
CVE-2025-55182 React2Shell PoC среда Предупреждение : Этот проект предназначен только для исследовательских и образовательных целей. Использование на чужих системах без разрешения незаконно. Обзор уязвимости Пункт| Содержание ---|--- CVE ID| CVE-2025-55182 Псевдоним| React2Shell Оценка CVSS| 10.0...
CVE-2025-55182
CVE-2025-55182 — React2Shell Strumento interattivo di sfruttamento per CVE-2025-55182 🧠 Cos'è CVE-2025-55182 ? React2Shell sfrutta una vulnerabilità critica di esecuzione remota di codice in React Server Components. Se il target esegue React 19 o un framework basato su RSC come Next.js, potrebbe...
react2shell-poc
React2Shell PoC CVE-2025-55182 Skrip Proof of Concept PoC...
react2shell-burp v0.1.1
React2Shell RCE Scanner and Validator CVE-2025-55182 Creator: j0lt Collaborator: https://github.com/shashank18 A Burp Suite extension that detects and validates the React2Shell vulnerability CVE-2025-55182 — a pre-authentication remote code execution flaw in React Server Components. The extension...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55...
Exploit for Deserialization of Untrusted Data in Facebook React
React2ShellExploit CVE-2025-55182 I created simple react2she...
Exploits and vulnerabilities in Q1 2026
During Q1 2026, the exploit kits leveraged by threat actors to target user systems expanded once again, incorporating new exploits for the Microsoft Office platform, as well as Windows and Linux operating systems. In this report, we dive into the statistics on published vulnerabilities and...
[Video] The TTP Ep. 22: The Collapse of the Patch Window
!\Video\ The TTP Ep. 22: The Collapse of the Patch Windowhttps://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/04/YiR2025cover2x1-3.jpg One of the clearest trends in the 2025 Talos Year in Review is just how quickly vulnerabilities are now being turned into...
PT-2026-20256
Old vuln, new life: React2Shell CVE-2025-55812 is seeing a surge in active exploitation with reverse shells + cryptominers. If your patching is based on CVSS instead of real-world activity, you’re already behind. https://t.co/2hEOe08JVG CyberSecurity ThreatIntel PatchNow...
Exploit for Deserialization of Untrusted Data in Facebook React
This Proof of Concept PoC for React2Shell CVE-2025-55182 vul...
Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
Cybersecurity researchers have disclosed details of an active web traffic hijacking campaign that has targeted NGINX installations and management panels like Baota BT in an attempt to route it through the attacker's infrastructure. Datadog Security Labs said it observed threat actors associated...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell PoC This repository provides a minimal intentiona...
⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More
The year opened without a reset. The same pressure carried over, and in some places it tightened. Systems people assume are boring or stable are showing up in the wrong places. Attacks moved quietly, reused familiar paths, and kept working longer than anyone wants to admit. This week's stories...
RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
RondoDox hackers exploit the React2Shell flaw in Next.js to target 90,000+ devices, including routers, smart cameras, and small business websites...
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers
Cybersecurity researchers have disclosed details of a persistent nine-month-long campaign that has targeted Internet of Things IoT devices and web applications to enroll them into a botnet known as RondoDox. As of December 2025, the activity has been observed leveraging the recently disclosed...