North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

Threat actors with ties to North Korea have likely become the latest to exploit the recently disclosed critical React2Shell security flaw in React Server Components RSC to deliver a previously undocumented remote access trojan dubbed EtherRAT. "EtherRAT leverages Ethereum smart contracts for...

Exploit for Deserialization of Untrusted Data in Facebook React

fix-react2shell A CLI tool to detect and fix the critical C...

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-C...

React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

We break down the exploit mechanics and detail active in-the-wild attacks observed by our team, from credential harvesting to sophisticated cloud backdoors...

⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

It's been a week of chaos in code and calm in headlines. A bug that broke the internet's favorite framework, hackers chasing AI tools, fake apps stealing cash, and record-breaking cyberattacks — all within days. If you blink, you'll miss how fast the threat map is changing. New flaws are being...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell 핵심 패키지 📦 포함 파일 1. 취약한 Do...

Exploit for Deserialization of Untrusted Data in Facebook React

Parameters - -f: File to scan default: urls.txt - -f...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js RCE Patcher CVE-2025-55182 A simple, automated tool...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 Detection Scripts Overview Thi...

Exploit for CVE-2025-55182

React2Shell Proof of Concept exploit for CVE-2025-55182 Unaut...

Exploit for CVE-2025-55182

React2Shell-RCE-...

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

Two hacking groups with ties to China have been observed weaponizing the newly disclosed security flaw in React Server Components RSC within hours of it becoming public knowledge. The vulnerability in question is CVE-2025-55182 CVSS score: 10.0, aka React2Shell, which allows unauthenticated remot...

Exploit for CVE-2025-55182

🚨 CVE-2025-55182 "React2Shell" — Critical RCE in React Server...

Exploit for CVE-2025-55182

Original PoCs for CVE-2025-55182 As public PoCs are circulati...

React Server Components 19.0 / 19.1.0 / 19.1.1 / 19.2.0 Remote Code Execution (React2Shell)

Binary data reactCVE-2025-55182.nbin...

Imperva Customers Protected Against React Server Components (RSC) Vulnerability

Overview On December 3, 2025, the React and Next.js teams disclosed a critical security vulnerability CVSS 10.0, identified as React2Shell, affecting applications that leverage React Server Components together with Server Actions or Server Functions. The React2Shell vulnerability stems from...