Lucene search
+L

865 matches found

GithubExploit
GithubExploit
•added 2025/12/09 5:07 p.m.•191 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell /$$$$$$$...

10CVSS8.2AI score0.99802EPSS
SaveExploits416
GithubExploit
GithubExploit
•added 2025/12/09 2:05 p.m.•228 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURIT...

10CVSS8.5AI score0.99802EPSS
SaveExploits402
CISA
CISA
•added 2025/12/09 12:00 p.m.•24 views

CISA Adds One Known Exploited Vulnerability to Catalog

Updated December 9, 2025: Check for signs of potential compromise on all internet accessible REACT instances after applying mitigations. For more information, see React Blog: Critical Security Vulnerability in React Server Componentslink is external. CISA has added one new vulnerability to its...

10CVSS7.7AI score0.99802EPSS
SaveIn wildExploits402References7
GithubExploit
GithubExploit
•added 2025/12/09 11:46 a.m.•159 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React Server Components RCE Exploit USAGE: C...

10CVSS8.1AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 11:09 a.m.•211 views

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ RSC Sentinel Pro Advanced React Server Components R...

10CVSS7.9AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 11:07 a.m.•199 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner !Pythonhttps://img.shields.i...

10CVSS8.2AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 10:41 a.m.•170 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Advanced Scanner A full-featured exploitation ut...

10CVSS8AI score0.99802EPSS
SaveExploits402
Hacker One
Hacker One
•added 2025/12/09 9:43 a.m.•42 views

IBM: [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182

Vulnerability description not provided...

10CVSS7.5AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 9:39 a.m.•190 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Scanner Simple command-line tool for detecting...

10CVSS8AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 9:17 a.m.•220 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔥 RSC RCE Exploit Toolkit !Versionhttps://img.shields.io...

10CVSS8.6AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 7:55 a.m.•224 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell !Languagehttps://img.shields.io/badge/Language...

10CVSS8.5AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 6:46 a.m.•279 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Indicator Scanner This repository provides a...

10CVSS7.8AI score0.99802EPSS
SaveExploits402
GithubExploit
GithubExploit
•added 2025/12/09 4:25 a.m.•185 views

Exploit for Deserialization of Untrusted Data in Facebook React

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-664...

10CVSS7.8AI score0.99802EPSS
SaveExploits416
Vaadin
Vaadin
•added 2025/12/09 12:00 a.m.•54 views

React 19 Server Components Critical Vulnerability (CVE-2025-55182, CVE-2025-55183, CVE-2025-55184)

On December 3, 2025, the React team disclosed a critical remote code execution vulnerability CVE-2025-55182, CVSS 10.0 affecting React 19 Server Components. This vulnerability has raised concerns among Vaadin users and security scanning tools. Update: On December 11 and 12, 2025, two new...

10CVSS7.3AI score0.99802EPSS
SaveExploits412References1
Packet Storm
Packet Storm
•added 2025/12/09 12:00 a.m.•212 views

📄 React 19.2.0 PHP Scanner / Remote Code Execution

This project delivers a PHP-based vulnerability scanner and remote code execution exploit for CVE‑2025‑55182 affecting React Server Components. It leverages RSC serialization weaknesses to execute arbitrary commands and validate successful exploitation...

10CVSS8.6AI score0.99802EPSS
SaveExploits402
Packet Storm
Packet Storm
•added 2025/12/09 12:00 a.m.•215 views

📄 React / Next.js Unauthenticated Remote Code Execution

A critical unauthenticated remote code execution vulnerability exists in React Server Components RSC Flight protocol. The vulnerability allows attackers to achieve prototype pollution during deserialization of RSC payloads by sending specially crafted multipart requests with proto, constructor, o...

10CVSS8.2AI score0.99802EPSS
SaveExploits416
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•9 views

CVE-2025-67489: Improper Control of Generation of Code

@vitejs/plugin-rs provides React Server Components RSC support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs loadServerAction, decodeReply, decodeAction when integrated into RSC...

9.8CVSS6.6AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/08 10:16 p.m.•19 views

Arbitrary Code Injection

Overview @vitejs/plugin-rsc is a React Server Components RSC support for Vite. Affected versions of this package are vulnerable to Arbitrary Code Injection via unsafe dynamic imports in the loadServerAction, decodeReply, and decodeAction server APIs. An attacker can execute arbitrary JavaScript...

9.8CVSS6.4AI score0.00807EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/12/08 9:56 p.m.•253 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Vulnerability Scanner A safe, non-invasive scanne...

10CVSS8.3AI score0.99802EPSS
SaveExploits416
Wallarm Lab
Wallarm Lab
•added 2025/12/08 4:00 p.m.•38 views

Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478)

The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit, as well as improved detection methods, exploitation mechanics observed in the wild, and rapidly growing atta...

10CVSS8.3AI score0.99802EPSS
SaveExploits416
Rows per page
Query Builder