Meta React Server Components Remote Code Execution Vulnerability

[POC] CVE-2025-55182 — react2shell-toolkit

Toolkit for CVE-2025-55182, also known as React2Shell.

[POC] CVE-2025-55182 — CVE-2025-55182-bypass

CVE-2025-55182-bypass-waf

[POC] CVE-2025-55182 — CVE-2025-55182

CVE-2025-55182漏洞检测工具

[POC] CVE-2025-55182 — React2Shell

A Firefox extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications.

[POC] CVE-2025-55182 — CVE-2025-55182-Next.js-RCE

Nextjs RCE Exploit

[POC] CVE-2025-55182 — CVE-2025-55182

Interactive RCE exploitation tool for CVE-2025-55182 (React Server Components)

[POC] GHSA-652q-gvq3-74qv — React2Shell-Exploit-CVE-2025-55182

React2Shell is a proof-of-concept exploit for CVE-2025-55182 affecting vulnerable React Server Components (RSC) implementations in Next.js

[POC] CVE-2025-55182 — r2rs

Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing

[POC] CVE-2025-55182 — GitExpose

Advanced security scanner detecting exposed files, React2Shell (CVE-2025-55182), ML model poisoning, LLM infrastructure exposure, and invisible Unicode attacks. Built for the 2026 threat landscape.

[POC] CVE-2025-55182 — React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol.

PoC: CVE-2025-55182

SIMPLE EXPOIT FOR CVE-2025-55182 FOR RCE , COMMAND INJECTIONS AND OTHER VULNERABILITIES

PoC: React2shell-Research

Analyze and reproduce CVE-2025-55182.

PoC: React2Shell

Isolated Docker lab, static detection scanner, and PoC validation for React2Shell (CVE-2025-55182).

PoC: Security_incident_report

React2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh/Sysmon/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트

PoC: cs50-cybersecurity

CS50's Introduction to Cybersecurity final project on React2Shell (CVE-2025-55182)

PoC: cve-2025-55182-react2shell-analysis

Technical analysis of CVE-2025-55182 (React2Shell), covering vulnerability mechanics, root cause, controlled PoC testing, impact, and mitigation strategies.

PoC: CVE-2025-55182-Exploit

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only.

PoC: CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and professional reporting (JSON/HTML/PDF). Authorized testing only.

PoC: cve-2025-55182-react2shell_reproduction

CVE Reproduction: cve-2025-55182-react2shell_reproduction

PoC: Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool (CVE-2025-55182)

PoC: reactorwatch-pentest

☢️ ReactorWatch v3.2.1 — Nuclear Reactor Core Monitoring System Pentest | CVE-2025-55182 (React2Shell) Unauthenticated RCE → SQLite Exfil → MD5 Crack → SSH Pivot → CDP Root Escalation | CVSS 10.0 | AMN SECURITY

PoC: react2shell

PoC for CVE-2025-55182 React2Shell

PoC: CVE-2025-55182

Exploit for CVE-2025-55182

PoC: React2shell-CVE-2025-55182-Exploit

Next.js / RSC - Unauthenticated RCE (React2Shell) (CVE-2025-55182)

PoC: CVE-2025-55182-React2Shell-RCE

React2Shell (CVE-2025-55182) PoC

PoC: react2shell-exploit

React2Shell: CVE-2025-55182

PoC: React2Shell-PoC-CVE-2025-55182

Khai thác lỗ hổng bảo mật CVE-2025-55182

PoC: CVE-2025-55182-POC

React2Shell POC

PoC: cve-2025-55182

POC for CVE-2025-55182

PoC: CVE-2025-55182

PoC exploit for CVE-2025-55182 (React2Shell) — Pre-auth RCE in React Server Components | CVSS 10.0

PoC: CVE-2025-55182

CVE-2025-55182 exploit script

PoC: JEFAZO-CVE-2025-55182-Checker

Escáner pasivo de seguridad para CVE-2025-55182 que identifica indicadores públicos asociados a Next.js y React Server Components. Realiza validaciones seguras, analiza cabeceras y rutas, y proporciona una evaluación de exposición basada en evidencias sin explotación.

PoC: React2Shell_Exploit

I created simple react2shell CVE-2025-55182 python exploit

PoC: react2shell

react2shell - CVE-2025-55182 (Next.js: CVE-2025-66478) - Unauthenticated RCE in React Server Components (Flight Protocol) - PoC Exploit

PoC: CVE-2025-55182

react CVE-2025-55182

PoC: HTB-Reactor-Linux-Machine---Walkthrough

Full walkthrough of HTB's Reactor machine — exploit CVE-2025-55182 to gain a shell, then get root via an exposed Node.js debugger. Step-by-step with screenshots.

PoC: react-rsc-cve-2025-55182-lab

Educational lab demonstrating CVE-2025-55182: Critical RCE in React Server Components via prototype pollution in the Flight protocol

PoC: CVE-2025-55182-React2shell

CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE

PoC: React2Shell-CVE-2025-55182

CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.

PoC: CVE-2025-55182-React2Shell

CVE-2025-55182 Exploit | by infrar3d

PoC: CVE-2025-55182

a.k.a. React2Shell

PoC: reactguard

ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)

PoC: React2Shell

Simple Lab for React2Shell CVE-2025-55182

PoC: flight-risk

Security toolkit for CVE-2025-55182 (React2Shell) — scan, detect, correlate, and test React Server Components RCE vulnerability

PoC: cve-2025-55182-analysis

Security research & exploitation analysis of CVE-2025-55182 (React) — CVSS + OWASP Top 10 mapping

PoC: CVE-2025-55182-poc-panel

This is a special panel that is used to send POC requests with the output of responses.

PoC: Explosive-As-Hell-MCS-Qualifer-Web-500

[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used Perl's POSIX setuid(0) to escalate to root → read /root/flag.txt

PoC: R2SAE

Firefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions

PoC: nextjs-rce-incident-response

Real-world incident response for CVE-2025-55182 (React2Shell) — script injection, server remediation, and post-incident report

PoC: rust-cve-2025-55182-scanner

powerfull rust cve-2025-55182-scanner used for ctf & ethical purpose only

PoC: CVE-2025-55182-Auto-Scanner

CVE-2025-55182 Auto Scanner - Improved Version For authorized CTF/testing purposes only

PoC: CVE-2025-55182-React2Shell-PoC

Proof-of-concept exploit for CVE-2025-55182 (React2Shell)

PoC: cve-2025-55182-react2shell-analysis

Technical analysis of CVE-2025-55182 (React2Shell RCE vulnerability)

PoC: nextjs-security-scanner

Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.

PoC: CVE-2025-55182_liyon

CVE-2025-55182

PoC: cve-2025-55182-lab

Intentionally vulnerable Next.js RSC Docker lab for CVE-2025-55182 (React2Shell) local testing

PoC: CVE-2025-55182-React2Shell-Masters-Thesis

Master's Thesis research on CVE-2025-55182 (React2Shell). Advanced exploit with 4 attack vectors, interactive shell, and complete vulnerable laboratory. Portfolio piece demonstrating security research and exploit development.

PoC: React2Shell-PoC-CVE-2025-55182

Khai thác lỗ hổng bảo mật CVE-2025-55182 trong thành phần React

PoC: CVE-2025-55182

CVE-2025-55182 — React2Shell

PoC: CVE-2025-55182_RCE_Exploit

REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch scanning with custom input, structured payload handling, and clear CLI output.

PoC: cve-2025-55182-poc

Proof-of-concept for CVE-2025-55182 (React2Shell): unauthenticated RCE in React Server Components / Next.js via Flight protocol deserialization.

PoC: CVE-2025-55182-React-RSC-Exploit

Basic Proof of Concept (Poc) Exploit for React RSC - CVE-2025-55182

PoC: CVE-2025-55182-in-docker

CVE-2025-55182-in-docker

PoC: CVE-2025-55182-React2Shell-Async-Scanner

Async RCE scanner for CVE-2025-55182 / CVE-2025-66478 — prototype-pollution → code execution via React Server Actions.

PoC: REACT-CVE-2025-55182-Lab

Lab with PoC

PoC: MassScanning-CVE-2025-55182

A lightweight orchestrator and worker scanner setup for running large/continuous scans across split input files. This repository contains orchestration scripts, a Docker-based worker image, and helper scripts to run scans repeatedly and collect results.

PoC: RSC-Detect-CVE-2025-55182

RSC Detect CVE 2025 55182

PoC: React2Shell-Wazuh-Detection

Detection Engineering lab for simulating and monitoring React2Shell (CVE-2025-55182) Insecure Deserialization attacks using Wazuh SIEM.

PoC: CVE-2025-55182

CVE-2025-55182

PoC: reactshell

Interactive shell client for React Server Components RCE exploitation via __proto__ pollution (CVE-2025-55182)

PoC: CVE-2025-55182-in-docker

Server Next.js old version in docker

PoC: CVE-2025-55182

针对 Next.js 原型污染漏洞 (CVE-2025-55182) 的高效批量检测工具。

PoC: React2Shell-POC

React2Shell (CVE-2025-55182) POC

PoC: CVE-2025-55182

RCE on Next 16.0.6

PoC: react2shell-CVE-2025-55182

An exploitation tool for the Next.js vulnerability CVE-2025-55182 that allows remote command execution through a poisoning prototype in React Server Components.

PoC: tech-seminar-React2Shell

우리FISA 기술세미나 3팀: React Server Component의 RCE 취약점인 'React2Shell (CVE-2025-55182)' 분석 및 연구

PoC: CVE-2025-55182

React2shell exploit (CVE-2025-55182+CVE-2025-66478)

PoC: React2shell-RCE-MassScanner

React2Shell (CVE-2025-55182)

PoC: React-2-Shell

This is a security exploit tool targeting CVE-2025-55182. It exploits a Remote Code Execution (RCE) vulnerability in React Server Components

PoC: CVE-2025-55182

CVE-2025-55182

PoC: supertej0622.github.io

🚀 Bypass CVE-2025-55182 protections with this tool, enhancing security assessments and streamlining vulnerability testing against WAF configurations.

PoC: CVE-2025-55182-Exploit

CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool

PoC: CVE-2025-55182

CVE-2025-55182

PoC: RSC-Detect-CVE-2025-55182

RSC Detect CVE 2025 55182

PoC: CVE-2025-55182

Remote code execution for React Server Components 19.0.0 - 19.2.0

PoC: react2shell

React2Shell is a high-performance vulnerability scanner written in Go, specifically designed to detect Server-Side Remote Code Execution (RCE) vulnerabilities in Next.js applications (CVE-2025-55182 & CVE-2025-66478).

PoC: asder10.github.io

🛠️ Exploit CVE-2025-55182 using React2Shell, an advanced framework for Next.js and React remote code execution. Secure your applications effectively.

PoC: React2Shell

🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.

PoC: CVE-2025-55182-poc-json

CVE-2025-55182-poc-json

PoC: CVE-2025-55182

Remote code execution for React Server Components 19.0.0 - 19.2.0

PoC: React2Shell

Simple Lab for React2Shell CVE-2025-55182

PoC: react2shell-exploit

CVE-2025-55182, also known as React2Shell, is a critical vulnerability affecting Next.js applications using React Server Components (RSC) and Server Actions.

PoC: React2Shell-Kingdom

"Once upon a time, the Castle of Reactland trusted all Flight messages... until The Imposter arrived." A storytelling CVE-2025-55182 (React2Shell) demo - Medieval-themed vulnerable React Server Components app for security education.

PoC: Next.js-RCE-CVE-2025-55182

next.js rce exploit

PoC: gahoole77.github.io

🔍 Discover and scan vulnerable Next.js instances to protect your infrastructure from critical RCE vulnerabilities like CVE-2025-55182.

PoC: React2Shell

React2Shell – CVE-2025-55182

PoC: CVE-2025-55182-GUI

CVE-2025-55182 漏洞检测与利用工具（GUI版）

PoC: RSC-Detect-CVE-2025-55182

RSC Detect CVE 2025 55182

PoC: React2Shell-CVE-2025-55182

A HackIndex.io sandbox environment for the React2Shell vulnerability.

PoC: CVE-2025-55182

CVE-2025-55182 - Tool React2Shell