803 matches found
CVE-2025-71389
Cal.com (calcom/cal.diy) versions before 5.9.9 are vulnerable to unauthenticated remote code execution via Next.js React Server Components (RSC) request handling that deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server to execute arbitrary code d...
CVE-2025-71389 Cal.com before 5.9.9 Remote Code Execution via RSC
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
CVE-2025-71389
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
CVE-2025-71389 Cal.com before 5.9.9 Remote Code Execution via RSC
Cal.com calcom/cal.diy before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components RSC request handling deserializes attacker-controlled input. A remote attacker can send a crafted RSC request to the server and cause...
GHSA-H8FP-F39C-Q6MH React Router: RSCErrorHandler Missing Protocol Validation (XSS)
This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62. React Router was alerted of a code path in the unstable RSC error handling path in which redirects from untrusted sources could still result in an XSS vector via attacker-supplied redirect...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth...
react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling
A flaw was found in React Router versions 7.7.0 through 7.13.1. When using the unstable React Server Components RSC APIs, insufficient sanitization of redirect targets allows client-side cross-site scripting if redirects originate from untrusted sources. An attacker could inject script that...
react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects
A flaw was found in React Router. This vulnerability, a type of Cross-Site Scripting XSS, affects applications utilizing React Router's unstable React Server Components RSC APIs. A remote attacker could exploit this by sending untrusted redirects, leading to the execution of malicious scripts in...
react2shell-poc
react2shell-poc Proof-of-concept exploit for CVE-2025-55182...
[SECURITY] Fedora 43 Update: openssh-10.0p1-10.fc43
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
Linux Distros Unpatched Vulnerability : CVE-2026-44576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can ...
Exploit for CVE-2026-23869
How to Fix CVE-2026-23869: Mitigate React Server Component Loo...
react-server-dom-webpack: react-server-dom-parcel: reactreact-server-dom-turbopack: React Server Components: Denial of Service via specially crafted HTTP requests
A flaw was found in React Server Components. A remote attacker can exploit this vulnerability by sending specially crafted HTTP requests to Server Function endpoints. This can lead to a Denial of Service DoS, causing server crashes, out-of-memory exceptions, or excessive CPU usage, thereby...
CVE-2026-36478
An issue in Technitium DNS Server v.14.3 and before allows a remote attacker to cause a denial of service via the DnsServerApp.exe, DnsServerApp.dll, TechnitiumLibrary.Net/Dns/DnsClient.cs components...
Exploit for Deserialization of Untrusted Data in Facebook React
Mô phỏng khai thác React2Shell CVE-2025-55182 Lưu ý: -...
CVE-2026-33245
A flaw was found in React Router. This vulnerability, a type of Cross-Site Scripting XSS, affects applications utilizing React Router's unstable React Server Components RSC APIs. A remote attacker could exploit this by sending untrusted redirects, leading to the execution of malicious scripts in...
Exploit for Deserialization of Untrusted Data in Facebook React
🛡️ React2Shell CTF 🚀 !Securityhttps://img.shields.io/badge...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell Unauthenticated RCE in React S...