[POC] CVE-2025-55182 β gahoole77.github.ioJan 5, 2026
pocexploitCVE-2025-55182
π Discover and scan vulnerable Next.js instances to protect your infrastructure from critical RCE vulnerabilities like CVE-2025-55182.
React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol.
CasaOS expose multiple unauthenticated API endpoints that allow remote disclosure of sensitive configuration files and system debug information
React2Shell β CVE-2025-55182
Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x.
CVE-2025-55182 ζΌζ΄ζ£ζ΅δΈε©η¨ε·₯ε ·οΌGUIηοΌ
RSC Detect CVE 2025 55182
A HackIndex.io sandbox environment for the React2Shell vulnerability.
CVE-2025-55182 - Tool React2Shell
π Scan for CVE-2025-55182 vulnerabilities with a hybrid tool that combines static and dynamic analysis for improved security assessments.
π‘οΈ Scan and assess vulnerabilities in Next.js/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.
A vulnerability categorized as critical has been discovered in PHPGurukul Online Course Registration up to 3.1. This impacts an unknown function. Such manipulation leads to authorization. This vulnerability is documented as CVE-2025-15406. The attack can be executed remotely. Additionally, an exploit exists.
WordPress Mobile builder Plugin <= 1.4.2 is vulnerable to a high priority Broken Authentication
POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133
π― Automated vulnerability scanner for React2Shell RCE - Google dorking + safe detection for CVE-2025-55182/CVE-2025-66478 (CVSS 10.0)
This repository provides a proof-of-concept for CVE-2025-55182 (React2Shell), a remote code execution vulnerability in React Server Components. It demonstrates how the exploit works, including the payload and impact.
UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic.