800 matches found
cve-2025-55182
CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Build and run vulnerable container root@kitploit: docker build -t cve-2025-55182:lab...
CVE-2025-55182
Vulnerable React Application CVE-2025-55182 This application is a Proof of Concept PoC for CVE-2025-55182 , a critical Remote Code Execution RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Severity : Critical CVSS 10.0 Affected Components : React Server...
CVE-2025-55182
CVE-2025-55182 - React2Shell PoC A proof of concept exploit for CVE-2025-55182, a critical CVSS 10.0 unauthenticated remote code execution vulnerability in React Server Components. Credit Discovered byLachlan Davidson - Disclosed to Meta/React team on November 29, 2025. Vulnerability Overview The...
react2shell-interactive
React2Shell - CVE-2025-55182 ŠŠ½ŃŠµŃŠ°ŠŗŃŠøŠ²Š½ŃŠ¹ PoC ŠŠ½ŃŠµŃŠ°ŠŗŃŠøŠ²Š½Š°Ń Š¾Š±Š¾Š»Š¾ŃŠŗŠ° Š“Š»Ń ŃŠŗŃŠæŠ»ŃŠ°ŃŠ°ŃŠøŠø CVE-2025-55182, ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠø ŃŠ“Š°Š»ŠµŠ½Š½Š¾Š³Š¾ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ ŠŗŠ¾Š“Š° Š² React Server Components. ŠŃŠŗŠ°Š· Š¾Ń Š¾ŃŠ²ŠµŃŃŃŠ²ŠµŠ½Š½Š¾ŃŃŠø ŠŃŠ¾Ń ŠøŠ½ŃŃŃŃŠ¼ŠµŠ½Ń ŠæŃŠµŠ“Š¾ŃŃŠ°Š²Š»ŃŠµŃŃŃ Š¢ŠŠŠ¬ŠŠ Š“Š»Ń ŠŠŠ ŠŠŠŠŠŠ¢ŠŠŠ¬ŠŠ«Š„ Šø ŠŠŠ¢ŠŠ ŠŠŠŠŠŠŠŠ«Š„ ŃŠµŠ»ŠµŠ¹ ŃŠµŃŃŠøŃŠ¾Š²Š°Š½ŠøŃ...
FiberBreak
FiberBreak Š¤ŃŠµŠ¹Š¼Š²Š¾ŃŠŗ Š“Š»Ń ŃŠŗŃŠæŠ»ŃŠ°ŃŠ°ŃŠøŠø CVE-2025-55182 React2Shell ā ŠŃŠøŃŠøŃŠµŃŠŗŠ°Ń RCE-ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ Š² ŃŠµŃŠ²ŠµŃŠ½ŃŃ ŠŗŠ¾Š¼ŠæŠ¾Š½ŠµŠ½ŃŠ°Ń React. ŠŠ±Š·Š¾Ń CVE : CVE-2025-55182 CVSS : 10.0 ŠŠ ŠŠ¢ŠŠ§ŠŠ”ŠŠŠÆ Š¢ŠøŠæ : Š£Š“Š°Š»ŠµŠ½Š½Š¾Šµ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŠµ ŠŗŠ¾Š“Š° RCE ŠŠ°ŃŃŠ°Š³ŠøŠ²Š°ŠµŃ : React 19.0.0-rc.0 Š“Š¾ 19.0.0, Next.js 15.0.0 Š“Š¾ 15.0.3 ŠŠ±Š½Š°ŃŃŠ¶ŠµŠ½ŠøŠµ :...
POC-CVE-2025-55182
NoMoreBreach Advisory: React2Shell CVE-2025-55182 Severity: Critical CVSS 10.0 Vulnerability Type: Remote Code Execution RCE via Deserialization Status: Patched Dec 3, 2025 Advisory Source: NoMoreBreach.com Executive Summary The NoMoreBreach research team highlights a critical vulnerability in...
POC-CVE-2025-55182
CVE-2025-55182 Advanced Scanner ŠŠ¾Š»Š½Š¾ŃŃŠ½ŠŗŃŠøŠ¾Š½Š°Š»ŃŠ½Š°Ń ŃŃŠøŠ»ŠøŃŠ° Š“Š»Ń ŃŠŗŃŠæŠ»ŃŠ°ŃŠ°ŃŠøŠø CVE-2025-55182 ā ŃŠ“Š°Š»ŠµŠ½Š½Š¾Šµ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŠµ ŠŗŠ¾Š“Š° ŃŠµŃŠµŠ· React Server Components Š² Next.js. Š”ŠŗŠ°Š½ŠµŃ Š°Š²ŃŠ¾Š¼Š°ŃŠøŃŠµŃŠŗŠø ŃŠ¾Š·Š“Š°ŠµŃ multipart-ŠæŠ¾Š»ŠµŠ·Š½ŃŃ Š½Š°Š³ŃŃŠ·ŠŗŃ Šø ŠøŃŠæŠ¾Š»ŃŠ·ŃŠµŃ process.mainModule.require'childprocess'.execSync Š“Š»Ń Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ...
Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478
š Next.js RCE Scanner - CVE-2025-55182 Šø CVE-2025-66478 ŠŠ¾ŃŠ½ŃŠ¹ Šø ŠæŃŠ¾ŃŃŠ¾Š¹ Š² ŠøŃŠæŠ¾Š»ŃŠ·Š¾Š²Š°Š½ŠøŠø ŃŠŗŠ°Š½ŠµŃ Š“Š»Ń Š¾Š±Š½Š°ŃŃŠ¶ŠµŠ½ŠøŃ ŠŗŃŠøŃŠøŃŠµŃŠŗŠøŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠµŠ¹ RCE Š² ŠæŃŠøŠ»Š¾Š¶ŠµŠ½ŠøŃŃ Next.js šÆ ŠŠ±Š·Š¾Ń ŠŃŠ¾Š“Š²ŠøŠ½ŃŃŃŠ¹ ŃŠŗŠ°Š½ŠµŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠµŠ¹ Š“Š»Ń Š¾Š±Š½Š°ŃŃŠ¶ŠµŠ½ŠøŃ CVE-2025-55182 Šø CVE-2025-66478 ā ŠŗŃŠøŃŠøŃŠµŃŠŗŠøŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠµŠ¹ ŃŠ“Š°Š»ŠµŠ½Š½Š¾Š³Š¾ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ...
CVE-2025-55182-Attack-Analysis
CVE-2025-55182 Attack Analysis: React Server Components RCE Real-world attack analysis on a production Next.js application š Table of Contents Executive Summary Vulnerability Overview Attack Timeline Technical Analysis Malware Analysis Indicators of Compromise IOCs Mitigation & Response Lessons...
react-vuln-scanner
Š”ŠŗŠ°Š½ŠµŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠø React CVE-2025-55182 Bash-ŃŠŗŃŠøŠæŃ Š“Š»Ń ŃŠŗŠ°Š½ŠøŃŠ¾Š²Š°Š½ŠøŃ Š²Š°ŃŠµŠ³Š¾ ŃŠµŃŠ²ŠµŃŠ° Š½Š° Š½Š°Š»ŠøŃŠøŠµ React-ŠæŃŠøŠ»Š¾Š¶ŠµŠ½ŠøŠ¹, ŃŃŠ·Š²ŠøŠ¼ŃŃ Šŗ CVE-2025-55182 ā ŠŗŃŠøŃŠøŃŠµŃŠŗŠ¾Š¹ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠø ŃŠ“Š°Š»ŃŠ½Š½Š¾Š³Š¾ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ ŠŗŠ¾Š“Š° CVSS 10.0 Š² React Server Components. ā ļø ŠŠ± ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠø 3 Š“ŠµŠŗŠ°Š±ŃŃ 2025 Š³Š¾Š“Š° ŠŗŠ¾Š¼Š°Š½Š“Š° React ŃŠ°ŃŠŗŃŃŠ»Š° ŠøŠ½ŃŠ¾ŃŠ¼Š°ŃŠøŃ ...
React2Shell-Kingdom
ŠŃŠ¾ŠµŠŗŃ Š“ŠµŠ¼Š¾Š½ŃŃŃŠ°ŃŠøŠø ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠø React CVE-2025-55182 ā ļø ŠŠ ŠŠŠ£ŠŠ ŠŠŠŠŠŠŠ Š ŠŠŠŠŠŠŠ”ŠŠŠ”Š¢Š ŠŃŠ¾Ń ŠæŃŠ¾ŠµŠŗŃ Š“ŠµŠ¼Š¾Š½ŃŃŃŠøŃŃŠµŃ ŠŗŃŠøŃŠøŃŠµŃŠŗŃŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ ŃŠ“Š°Š»ŠµŠ½Š½Š¾Š³Š¾ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ ŠŗŠ¾Š“Š° RCE CVE-2025-55182 / React2Shell Š² React Server Components 19.1.1. Š¢ŠŠŠ¬ŠŠ ŠŠŠÆ ŠŠŠ ŠŠŠŠŠŠ¢ŠŠŠ¬ŠŠ«Š„ Š¦ŠŠŠŠ Š ŠŠ”Š”ŠŠŠŠŠŠŠŠŠ ŠŠŠŠŠŠŠ”ŠŠŠ”Š¢Š ŠŠŠŠŠŠŠ Š½...
react2shell-checker
React2Shell Checker A security vulnerability scanner for detecting the React2Shell vulnerability CVE-2025-55182 in Next.js and React applications. Overview React2Shell Checker allows you to scan websites to detect if they are running vulnerable versions of Next.js or React Server Components. The...
CVE-2025-55182-Toolbox
React2Shell: Comprehensive Exploitation Tool for CVE-2025-55182 Author: lamaper / BITs2Sys Version: 1.0.1 License: MIT š Tool Introduction This tool is an automated penetration testing tool specifically designed for CVE-2025-55182 React Server Components / Next.js prototype pollution leading to...
scanner-for-CVE-2025-55182-vulnerability
š”ļø Š”ŠŗŠ°Š½ŠµŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŠµŠ¹ GitHub Š“Š»Ń CVE-2025-55182 React/Next.js RCE ŠŃŠ¾Ń ŃŠŗŃŠøŠæŃ Š½Š° Python ŠæŃŠµŠ“Š½Š°Š·Š½Š°ŃŠµŠ½ Š“Š»Ń ŃŠŗŠ°Š½ŠøŃŠ¾Š²Š°Š½ŠøŃ Š²ŃŠµŃ Š²Š°ŃŠøŃ ŠæŃŠ±Š»ŠøŃŠ½ŃŃ Šø ŠæŃŠøŠ²Š°ŃŠ½ŃŃ ŃŠµŠæŠ¾Š·ŠøŃŠ¾ŃŠøŠµŠ² GitHub Š½Š° ŠæŃŠµŠ“Š¼ŠµŃ Š·Š°Š²ŠøŃŠøŠ¼Š¾ŃŃŠµŠ¹, ŠæŠ¾ŃŠµŠ½ŃŠøŠ°Š»ŃŠ½Š¾ ŃŃŠ·Š²ŠøŠ¼ŃŃ Šŗ CVE-2025-55182 ŠŗŃŠøŃŠøŃŠµŃŠŗŠ°Ń ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ ŃŠ“Š°Š»ŃŠ½Š½Š¾Š³Š¾ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ ŠŗŠ¾Š“Š°, Š·Š°ŃŃŠ°Š³ŠøŠ²Š°ŃŃŠ°...
CVE-2025-55182
What is CVE-2025-55182? Also known as React2Shell, this vulnerability refers to a structural flaw in React Server Components where prototype pollution occurs during data deserialization, enabling RCE. Affected versions are React 19.0.0, 19.1.0, 19.1.1, 19.2.0, Next.js 15.x 15.0.0 15.5.6, 16.x...
secure-by-default-rce-demo
Š”Š¼ŃŠ³ŃŠµŠ½ŠøŠµ RCE Š² Node.js: DevOps ŠŗŠ°Šŗ ŠæŠ¾ŃŠ»ŠµŠ“Š½ŃŃ Š»ŠøŠ½ŠøŃ Š¾Š±Š¾ŃŠ¾Š½Ń ŠŃŠ¾Ń ŠæŃŠ¾ŠµŠŗŃ Š“ŠµŠ¼Š¾Š½ŃŃŃŠøŃŃŠµŃ ŠŗŃŠøŃŠøŃŠµŃŠŗŃŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ ŃŠ“Š°Š»ŠµŠ½Š½Š¾Š³Š¾ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŃ ŠŗŠ¾Š“Š° RCE Š² ŠæŃŠøŠ»Š¾Š¶ŠµŠ½ŠøŠø Next.js ŠŗŠ¾Š½ŠŗŃŠµŃŠ½Š¾ ŃŠµŃŠµŠ· Server Actions Šø ŃŠ¾, ŠŗŠ°Šŗ ŃŃŠøŠ»ŠµŠ½ŠøŠµ ŠøŠ½ŃŃŠ°ŃŃŃŃŠŗŃŃŃŃ ŃŃŃŠµŠŗŃŠøŠ²Š½Š¾ Š½ŠµŠ¹ŃŃŠ°Š»ŠøŠ·ŃŠµŃ Š°ŃŠ°ŠŗŃ, Š“Š°Š¶Šµ ŠµŃŠ»Šø ŠŗŠ¾Š“Š¾Š²Š°Ń ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ Š¾ŃŃŠ°ŠµŃŃŃ. Š...
cve-2025-55182-react2shell_reproduction
CVE-2025-55182 ā React2Shell CVSS 10.0 ŠŠ ŠŠ¢ŠŠ§ŠŠ”ŠŠŠ | Š£Š“Š°Š»ŠµŠ½Š½Š¾Šµ Š²ŃŠæŠ¾Š»Š½ŠµŠ½ŠøŠµ ŠŗŠ¾Š“Š° Š“Š¾ Š°ŃŃŠµŠ½ŃŠøŃŠøŠŗŠ°ŃŠøŠø Š² React Server Components ŠŠ±Š½Š°ŃŃŠ¶ŠµŠ½Š¾ ŠŗŠøŃŠ°Š¹ŃŠŗŠøŠ¼Šø Š·Š»Š¾ŃŠ¼ŃŃŠ»ŠµŠ½Š½ŠøŠŗŠ°Š¼Šø. ŠŠŗŃŠøŠ²Š½Š¾ ŃŠŗŃŠæŠ»ŃŠ°ŃŠøŃŃŠµŃŃŃ APT-Š³ŃŃŠæŠæŠ°Š¼Šø, ŃŠ²ŃŠ·Š°Š½Š½ŃŠ¼Šø Ń ŠŠøŃŠ°ŠµŠ¼. ŠŠ±Š·Š¾Ń ŠŠ±Š¾Š·Š½Š°ŃŠµŠ½Š½Š°Ń ŠŗŠ°Šŗ Ā«React2ShellĀ» , ŃŃŠ° ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ ŠæŠ¾Š·Š²Š¾Š»ŃŠµŃ...
CVE-2025-55182
CVE-2025-55182 - React2Shell Pre-authentication RCE in React Server Components. Summary of the CVE A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the react-server-dom-parcel,...
next88
next88 - React Server Components RCE Scanner High-performance Go implementation for detecting React Server Components RCE vulnerabilities CVE-2025-55182 & CVE-2025-66478. Features š High Performance : Compiled Go binary with goroutine-based concurrency š Multiple Detection Methods : Safe...
CVE-2025-55182
RSC Detector - React Server Components Vulnerability Scanner A Python-based security scanner for detecting and exploiting React Server Components RSC vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing. ā ļø WARNING : Thi...