📄 Next.js 15 Remote Code Execution

A PHP-based proof of concept implementation demonstrating the critical remote code execution vulnerability in React Server Components RSC Flight protocol, affecting React and Next.js applications...

Exploit for CVE-2025-66478

PO...

Exploit for CVE-2025-66478

Check for CVE-2025-66478 Checks if your NextJS server is vulne...

CVE-2025-66478

creationtimestamp| type| source ---|---|--- 2025-12-03 16:25:30+00:00| seen| https://bsky.app/profile/weld.bsky.social/post/3m73uolv7hs2r 2025-12-03 16:25:31+00:00| seen| https://bsky.app/profile/weld.bsky.social/post/3m73uolvfdc2r 2025-12-03 16:25:31+00:00| seen|...

CVE-2025-66478

CVE-2025-66478 describes an unauthenticated remote code execution vulnerability in React Server Components, affecting Next.js apps that use the App Router with React Server Components (including packages like react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack). The ...