CVE-2026-127109

A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property names in the context object ctx to execute arbitrary code with the privileges of the Node.js process. The library inserts context property names into a generated function’s...

CVE-2026-127109 CVE-2026-127109

A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property names in the context object ctx to execute arbitrary code with the privileges of the Node.js process. The library inserts context property names into a generated function’s...

CVE-2026-127109

A code injection vulnerability exists in the template-loading functionality of the promzard library. The flaw occurs because the library inserts context object property names into a generated function's parameter list without proper validation or escaping. This allows an attacker who can control ...

CVE-2025-55182

CVE-2025-55182 POST /formaction HTTP/1.1 Host: localhost Content-Type: multipart/form-data; boundary=----Boundary Content-Length: 297 ------Boundary Content-Disposition: form-data; name="$ACTIONREF0" ------Boundary Content-Disposition: form-data; name="$ACTION0:0"...

CVE-2025-55182-poc

CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. Quick Start Install dependencies npm install Start vulnerable server port 3002 npm start Run RCE exploit npm run exploit Expected Output...

CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC This project is a CVE-2025-55182 - React Server Components RSC RCE Proof of Concept , demonstrating remote code execution triggered under specific conditions via vm.runInThisContext and malicious ACTION payload. Python side: Automates sending malicio...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - React Server Components Prototype Chain Vulnerability This POC demonstrates CVE-2025-55182 using actual [email protected] vulnerable code. CVE-2025-55182 Emergency Fix Guide: Complete Analysis & Mitigation for Next.js/React RSC Vulnerability CVSS 10.0 This repository is fork...