127 matches found
CVE-2025-55182-exploit
CVE-2025-55182 漏洞利用 这个仓库包含一个针对 CVE-2025-55182 的简单漏洞利用程序，这是 React Server Components 中的一个严重远程代码执行漏洞。 漏洞概述 CVE-2025-55182 是 React Server Components 中的一个未认证远程代码执行漏洞（CVSS 10.0）。该漏洞影响 React 对发送到 React Server Function 端点的负载进行解码的方式，允许攻击者构造恶意 HTTP 请求，从而在服务器上实现远程代码执行。 受影响版本 react-server-dom-webpack: 19.0,...
CVE-2025-55182
CVE-2025-55182 RCE स्वयं-उपयोग जांच उपकरण, CVE-2025-55182 भेद्यता की जांच के लिए भेद्यता सिद्धांत React Server Components में, सर्वर फ़ंक्शन एंडपॉइंट पर भेजे गए payload को डिकोड करते समय, पथ विश्लेषण में दोष है। यह कोलन द्वारा ऑब्जेक्ट गुणों को अलग करके नेस्टेड मान निकालता है जैसे: $1🅰️b का अर्थ...
Unihackers---CVE-2025-55182-
PANDILLA ITALIANA React2Shell PoC Este repositorio proporciona un entorno mínimo intencionalmente vulnerable para probar escáneres de seguridad contra la reciente vulnerabilidad crítica RCE React2Shell que afecta a React Server Components y Next.js. CVE-2025-55182 : Existe una vulnerabilidad de...
RSC-Scanner-POC
Next.js RSC 源代码泄露扫描器 用于检测 CVE-2025-55183（Next.js React 服务端组件 RSC 源代码泄露漏洞）的安全扫描器。 描述 该扫描器用于检测 Next.js React 服务端组件（RSC）中的源代码泄露问题。当向存在漏洞的服务端函数发送恶意 HTTP 请求时，若参数被序列化为字符串，该请求可能不安全地返回任意服务端函数的源代码。 特性 🔍 自动扫描 ：扫描单个 URL 或批量主机列表 ⚡ 并发扫描 ：多线程扫描，提升速度 🔄 重试逻辑 ：自动重试并采用指数退避，应对瞬时故障 📊 多种输出格式 ：支持文本、JSON 和 CSV 格式 🚦 速率限...
CVE-2025-55182
React2Shell PoC Este repositorio proporciona un entorno mínimo e intencionalmente vulnerable para probar escáneres de seguridad contra la reciente vulnerabilidad crítica de ejecución remota de código React2Shell que afecta a React Server Components y Next.js. CVE-2025-55182 : Existe una...
CVE-2025-55183_POC
CVE-2025-55183 - Divulgation du code source des fonctions serveur RSC de Next.js Une vulnérabilité de divulgation de code source dans les composants serveur React RSC de Next.js. Une requête HTTP malveillante envoyée à une fonction serveur vulnérable peut renvoyer de manière non sécurisée le code...
React2Shell
@React2Hell — CVE-2025-55182 Exploit 🔥 Exploração de Execução Remota de Código RCE no Next.js / React Server root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄...
CVE-2025-55182
CVE-2025-55182 Scanner & Exploiter !Warning Dieses Repository ist ausschließlich für Bildungs- und Forschungszwecke bestimmt. Verwenden Sie die bereitgestellten PoCs ausschließlich auf Systemen, die Ihnen gehören oder für die Sie ausdrückliche Erlaubnis zum Testen haben. Unautorisierter Zugriff ,...
React2Hell
🧨 React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React Server Esecuzione Remota di Codice RCE Exploit root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ Next.js/React Serv...
CVE-2025-55182-React2Shell-Lab
CyberSec Blog CTF - React2Shell PoC Questo repository fornisce un ambiente CTF Capture The Flag vulnerabile basato su un blog di cybersecurity che utilizza Next.js e React Server Components. CVE-2025-55182 : Vulnerabilità di esecuzione di codice in remoto RCE pre-autenticazione in React Server...
React Server Components - Remote Code Execution
React Server Components 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack contain a remote code execution caused by unsafe deserialization of payloads from HTTP requests to Server Function endpoints, letting...
React4Shell
React2Shell Exploit Proof of Concept PoC für React Server Components RSC / Next.js Remote Code Execution-Schwachstelle. Beschreibung Eine vor der Authentifizierung ausnutzbare Schwachstelle zur Remote-Code-Ausführung besteht in React Server Components Versionen 19.0.0, 19.1.0, 19.1.1 und 19.2.0,...
react-vuln-scanner
Scanner per la vulnerabilità React CVE-2025-55182 Uno script bash per scansionare il tuo server alla ricerca di applicazioni React vulnerabili a CVE-2025-55182 — una vulnerabilità critica di esecuzione remota di codice CVSS 10.0 in React Server Components. ⚠️ Sulla vulnerabilità Il 3 dicembre 2025...
React2Shell_Rce-cve-2025-55182
React Server Components RCE – README Buona giornata , spero davvero che tutto sia fantastico dal tuo lato dello schermo! 😊✨ Descrizione Le versioni 19.0.0 , 19.1.0 , 19.1.1 e 19.2.0 di React Server Components, incluse react-server-dom-parcel, react-server-dom-turbopack e react-server-dom-webpack,...
CVE-2026-53551
The vulnerability CVE-2026-53551 affects free5GC AUSF prior to version 1.4.5, where the supiOrSuci field in UE authentication requests is not validated. Null bytes (\x00) and other control characters pass through JSON parsing and are forwarded to the UDM in an unescaped URL path, causing Go’s net...
Allocation of Resources Without Limits or Throttling
Overview react-server-dom-parcel is a React Server Components bindings for DOM using Parcel. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...
Allocation of Resources Without Limits or Throttling
Overview react-server-dom-turbopack is a React Server Components bindings for DOM using Turbopack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or...
NPM: Next.js: Unauthenticated disclosure of internal Server Function endpoints
NPM: Next.js: Unauthenticated disclosure of internal Server Function endpoints vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...
CVE-2026-44907
A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack versions 19.0.0...
