CVE-2025-55182

CVE-2025-55182 Herramienta de explotación RCE de Next.js 🚀 Esta es una herramienta de prueba de concepto PoC automatizada para la vulnerabilidad de ejecución remota de código RCE de Next.js React Server Components CVE-2025-55182. La herramienta integra funciones de Shell interactivo ,...

CVE-2025-55182-NextJS-RCE-PoC

CVE-2025-55182 React2Shell Reproduction Environment ⚠️ EDUCATIONAL PURPOSE ONLY This repository is created strictly for educational and research purposes. It demonstrates a critical vulnerability in React Server Components Next.js to help developers understand the risks and importance of updating...

CVE-2025-55182-PoC

⚡ React2Shell PoC de Exploit CVE-2025-66478 Ejecución Remota de Código RCE en Next.js mediante Contaminación de Prototipos en Componentes del Servidor 🕵️‍♂️ Descripción general Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-66478 también referenciada como CVE-2025-55182 en...

react2shell-CVE-2025-55182

Exploit React2Shell CVE-2025-55182 Exploit en Python para la vulnerabilidad RCE de los componentes del servidor React de Next.js con soporte HTTP/HTTPS. 🚀 Inicio rápido root@kitploit: Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-551...

react2shell-lab

React2Shell - CVE-2025-55182 Lab A comprehensive laboratory for demonstrating and testing the critical vulnerability CVE-2025-55182 in React Server Components. ⚠️ Educational Purpose Only This repository is intended for: Security research and education Understanding vulnerability mechanisms Testin...

React2Shell-PoC

React2Shell-PoC A proof-of-concept exploit for CVE-2025-55182 and CVE-2025-66478 , critical Remote Code Execution vulnerabilities in React Server Components RSC and Next.js applications. Overview React2Shell demonstrates the exploitation of unsafe deserialization in Next.js server action handlers...

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 Herramienta de Explotación Una herramienta de prueba de concepto para demostrar la vulnerabilidad crítica React2Shell CVE-2025-55182 / CVE-2025-66478 únicamente en entornos de prueba locales autorizados. ⚠️ ADVERTENCIA CRÍTICA: EXPLOTACIÓN ACTIVA Esta...

CVE-2025-55182

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

CVE-2025-55182-React2Shell-CVSS-10.0-

Affected Software: React Server Components versions 19.0.0, 19.1.0, 19.1.1, 19.2.0 Vulnerability Type: Pre-authentication Remote Code Execution via insecure deserialization. Description: A flaw in the React Server Flight protocol allows unauthenticated attackers to send specially crafted serializ...

CVE-2025-55182

CVE-2025-55182 Scanner A proof-of-concept scanner for CVE-2025-55182 , a critical unauthenticated Remote Code Execution RCE vulnerability in React Server Components RSC. Overview On December 3, 2025, a critical vulnerability was disclosed affecting React 19.x and Next.js applications using React...

react2shell

React2Shell Herramienta CLI + plantillas de Nuclei para detectar dos vulnerabilidades críticas de RCE en React Server Components y Next.js Server Actions. El escáner fue reescrito basándose en la vulnerabilidad react2shell divulgada. Resumen de vulnerabilidades CVE-2025-55182 – RCE por...

CVE-2025-55182-analysis

1. Resumen de la vulnerabilidad Estos días se ha hablado mucho de una vulnerabilidad RCE por deserialización en React, con una puntuación CVSS oficial de 10.0, igual que Log4j en su momento. No pocos rumores la calificaban como el Log4j del frontend moderno, causando pánico entre desarrolladores...

MassExploit-CVE-2025-55182

CVE-2025-55182 – Escáner Masivo PoC CVE-2025-55182 también conocida como “React2Shell” es una vulnerabilidad crítica de Ejecución Remota de Código RCE en el sistema de Componentes del Servidor de React RSC. El problema ocurre porque el mecanismo de deserialización de cargas útiles HTTP para...

CVE-2025-55182

CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution...

CVE-2025-55182-poc

CVE-2025-55182 Proof of Concept Critical Pre-Authentication Remote Code Execution in React Server Components A complete proof-of-concept demonstrating CVE-2025-55182, a critical vulnerability in [email protected] that allows unauthenticated attackers to execute arbitrary code via prototype...

CVE-2025-55182-scanner

React Server Components Surface Exposure Scanner CVE-2025-55182 A specialized, non-intrusive surface detector for CVE-2025-55182 React Server Components RCE. ⚠️ Critical Technical Context Read this before scanning: While CVE-2025-55182 is a critical RCE vulnerability CVSS 10.0, real-world...

React2Shell-CVE-2025-55182-An-lise-T-cnica

React2Shell CVE-2025-55182 📖 Visión General Este repositorio documenta los conceptos de seguridad estudiados en la sala de TryHackME referente al CVE-2025-55182 , una vulnerabilidad crítica que afecta: React Server Components RSC Next.js y frameworks basados en RSC Paquetes:...

R2C-CVE-2025-55182-66478

🔥React2Shell Toolkit-CVE-2025-55182 & CVE-2025-66478 🚨 Critical RCE in React Server Components & Next.js 🚨 Professional Red Team Toolkit for CVE-2025-55182 Detection & Exploitation 🔍 Features • ⚡ Quick Start • 📚 Documentation • 🤝 Connect 🎯 About CVE-2025-55182 & CVE-2025-66478 🐛 What is...

CVE-2025-55182

CVE-2025-55182 Scanner This repository contains a scanner tool for CVE-2025-55182 RCE and CVE-2025-55183 Source Code Disclosure in Next.js React Server Components RSC. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Do not use this tool on systems you do not own or...

react2shell

React2Shell - CVE-2025-55182 Exploit PoC A proof-of-concept exploit for CVE-2025-55182, a critical Remote Code Execution vulnerability in Next.js applications using React Server Components. ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY. ❌ DO NOT use against system...