Actively exploited · CISA KEV
Actively exploitedCVE-2025-55182
- First PoC
- 1267 days →KEV
- 179 days →Metasploit
- 137 days →First cited attacker
Signals
- Exploited in the wild
- Yesadded 2025-12-05 · due 2025-12-12 · known ransomware use. An observation, not a forecast.
- EPSS · 30-day forecast
- 99.8%Chance of exploitation in the next 30 days, 100th percentile of all CVEs. A forecast; KEV outranks it.
- CVSS · NVD
- not stated by sourcesNo NVD record yet.
- Internet exposure
- not stated by sourcesNo exposure census on this CVE's dispatches.
Exploits
400 known · links onlyGitHub PoCs · by trust, then stars400
- assetnote/react2shell-scanner ↗Trust ok 100
High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
★ 2,453 · created 2025-12-04
- msanft/CVE-2025-55182 ↗Trust ok 100
Explanation and full RCE PoC for CVE-2025-55182
★ 1,431 · created 2025-12-04
Original Proof-of-Concepts for React2Shell CVE-2025-55182
★ 1,064 · created 2025-12-05
- ejpir/CVE-2025-55182-research ↗Trust ok 100
CVE-2025-55182 POC
★ 790 · created 2025-12-03
- mrknow001/RSC_Detector ↗Trust ok 100
Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.
★ 587 · created 2025-12-05
- emredavut/CVE-2025-55182 ↗Trust ok 100
RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478
★ 313 · created 2025-12-06
- zack0x01/CVE-2025-55182-advanced-scanner- ↗Trust ok 100
★ 281 · created 2025-12-06
- ynsmroztas/NextRce ↗Trust ok 100
React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)
★ 266 · created 2025-12-06
- alptexans/RSC-Detect-CVE-2025-55182 ↗Trust ok 100
RSC Detect CVE 2025 55182
★ 190 · created 2026-02-25
- pyroxenites/Nextjs_RCE_Exploit_Tool ↗Trust ok 100
Exploit for CVE-2025-55182 & CVE-2025-66478
★ 141 · created 2025-12-05
- Rsatan/Next.js-Exploit-Tool ↗Trust ok 100
Next.js-Exploit-Tool 图形化综合利用工具，基于 Go 开发，一款针对 CVE-2025-55182 的独立安全评估工具。
★ 117 · created 2025-12-04
- fatguru/CVE-2025-55182-scanner ↗Trust ok 100
A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications
★ 110 · created 2025-12-03
★ 107 · created 2025-12-10
- whiteov3rflow/CVE-2025-55182-poc ↗Trust ok 100
React2Shell Proof of Concept
★ 95 · created 2025-12-04
- l4rm4nd/CVE-2025-55182 ↗Trust ok 100
Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation
★ 87 · created 2025-12-05
- Chocapikk/CVE-2025-55182 ↗Trust ok 100
Next.js React Server Components RCE exploit for CVE-2025-55182
★ 69 · created 2025-12-05
- freeqaz/react2shell ↗Trust ok 100
An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools, technical information, etc
★ 69 · created 2025-12-05
- dwisiswant0/CVE-2025-55182 ↗Trust ok 100
Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.
★ 59 · created 2025-12-04
- gensecaihq/react2shell-scanner ↗Trust ok 100
Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.
★ 58 · created 2025-12-04
- xalgord/React2Shell ↗Trust ok 100
Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)
★ 55 · created 2025-12-12
- Spritualkb/CVE-2025-55182-exp ↗Trust ok 100
CVE-2025-55182 React Server Components Remote Code Execution Exploit Tool
★ 47 · created 2025-12-05
- kavienanj/CVE-2025-55182 ↗Trust ok 100
Step-by-step walkthrough of CVE-2025-55182 (React2Shell) by tracing React's Flight protocol internals.
★ 38 · created 2025-12-07
- sumanrox/rschunter ↗Trust ok 100
Mass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478
★ 37 · created 2025-12-06
- MoLeft/React2Shell-Toolbox ↗Trust ok 100
A CVE-2025-55182(React2Shell) Toolbox Application
★ 36 · created 2025-12-13
- surajhacx/react2shellpoc ↗Trust ok 100
react2shell CVE-2025-55182 PoC
★ 32 · created 2025-12-07
- RuoJi6/CVE-2025-55182-RCE-shell ↗Trust ok 100
Burp Suite/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC/BASE64)
★ 31 · created 2025-12-05
- momika233/CVE-2025-55182-bypass ↗Trust ok 100
CVE-2025-55182-bypass-waf
★ 30 · created 2026-01-08
使用burp自动检测CVE-2025-55182 Next.js RCE 漏洞
★ 29 · created 2025-12-05
- aliclub0x00/CVE-2025-55182-POC-NEXTJS ↗Trust ok 100
Working proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]
★ 27 · created 2025-12-05
- cybertechajju/R2C-CVE-2025-55182-66478 ↗Trust ok 100
🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478
★ 24 · created 2025-12-07
Burp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).
★ 24 · created 2025-12-04
- zack0x01/vuln-app-CVE-2025-55182 ↗Trust ok 100
★ 22 · created 2025-12-06
- MrR0b0t19/CVE-2025-55182-shellinteractive ↗Trust ok 100
★ 21 · created 2025-12-04
- ThemeHackers/CVE-2025-55182 ↗Trust ok 100
a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test and understand the vulnerability.
★ 21 · created 2025-12-04
- vijay-shirhatti/RSC-Detect-CVE-2025-55182 ↗Trust ok 100
RSC Detect CVE 2025 55182
★ 21 · created 2025-12-20
- theori-io/reactguard ↗Trust ok 100
ReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)
★ 18 · created 2025-12-10
- kOaDT/poc-cve-2025-55182 ↗Trust ok 100
This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.
★ 16 · created 2025-12-05
- AliHzSec/CVE-2025-55182 ↗Trust ok 100
Critical RCE vulnerability scanner for React Server Components (CVE-2025-55182). Automated exploitation framework with multi-payload support, proxy capabilities, and interactive command execution.
★ 15 · created 2025-12-07
- xcanwin/CVE-2025-55182-React-RCE ↗Trust ok 100
[漏洞复现] 全球首款基于RSC特性能绕过WAF检测的CVE-2025-55182 React Server RCE 漏洞 EXP。
★ 15 · created 2025-12-07
- BlackTechX011/React2Shell ↗Trust ok 100
React2Shell: An exploitation framework for CVE-2025-55182 (Next.js/React RCE).
★ 14 · created 2025-12-22
- sickwell/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface
★ 14 · created 2025-12-03
- acheong08/CVE-2025-55182-poc ↗Trust ok 100
Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.
★ 13 · created 2025-12-04
- shyambhanushali/React2Shell ↗Trust ok 100
React2Shell is a Python-based proof-of-concept tool designed to exploit CVE-2025-55182 and CVE-2025-66478, both impacting Next.js applications using React Server Components (RSC).
★ 13 · created 2025-12-09
Script to quick check CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Critical unauthenticated RCE vulnerabilities in the React Server Components (RSC) “Flight” protocol.
★ 12 · created 2025-12-03
- Pizz33/CVE-2025-55182-burpscanner ↗Trust ok 100
基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件
★ 12 · created 2025-12-05
- zr0n/react2shell ↗Trust ok 100
A complete framework for exploiting the vulnerability CVE-2025-55182
★ 12 · created 2025-12-07
- shamo0/react2shell-PoC ↗Trust ok 100
Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)
★ 10 · created 2025-12-04
- sho-luv/React2Shell ↗Trust ok 100
CVE-2025-55182 security test kit: CLI scanner + Chrome extension + Nuclei templates + Docker lab.
★ 10 · created 2025-12-12
- GelukCrab/React-Server-Components-RCE ↗Trust ok 100
React Server Components 远程代码执行漏洞(CVE-2025-55182)
★ 9 · created 2025-12-05
- M4xSec/CVE-2025-55182-React2Shell-RCE-Shell ↗Trust ok 100
CVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only.
★ 9 · created 2025-12-07
- p3ta00/react2shell-poc ↗Trust ok 100
CVE-2025-55182 React2Shell PoC - Critical RCE in React Server Components / Next.js. CVSS 10.0. Error-based exfil, reverse shell, interactive mode.
★ 9 · created 2025-12-20
- AdityaBhatt3010/React2Shell-CVE-2025-55182 ↗Trust ok 100
React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol.
★ 8 · created 2026-01-04
React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups.
★ 8 · created 2025-12-06
- heiheishushu/rsc_detect_CVE-2025-55182 ↗Trust ok 100
For CVE-2025-55182 and CVE-2025-66478 Security Response
★ 8 · created 2025-12-04
- im-ezboy/CVE-2025-55182-zoomeye ↗Trust ok 100
🔍 Next.js RCE Scanner (CVE-2025-55182) - Automated vulnerability scanner using Zoomeye search engine. Discovers targets via dorks and tests for CVE-2025-55182 with parallel scanning capabilities.
★ 8 · created 2025-12-08
- nehkark/CVE-2025-55182 ↗Trust ok 100
PoC: CVE-2025-55182 (React) and CVE-2025-66478 (Next.js)
★ 8 · created 2025-12-05
- StealthMoud/CVE-2025-55182-Scanner ↗Trust ok 100
★ 8 · created 2025-12-05
- zzhorc/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182复现环境及RCE回显poc
★ 8 · created 2025-12-05
- alsaut1/react2shell-lab ↗Trust ok 100
CVE-2025-55182 React2Shell PoC lab
★ 7 · created 2025-12-05
- jctommasi/react2shellVulnApp ↗Trust ok 100
Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.
★ 7 · created 2025-12-04
- TheStingR/ReactOOPS-WriteUp ↗Trust ok 100
Hack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182/CVE-2025-66478 (React2Shell RCE). Includes detailed vulnerability analysis, exploitation techniques, and team learning materials.
★ 7 · created 2025-12-13
- websecuritylabs/React2Shell-Library ↗Trust ok 100
A curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as "React2Shell".
★ 7 · created 2025-12-07
- ejpir/CVE-2025-55182-bypass ↗Trust ok 100
Header bypass for CVE-2025-55182 (React Server Components RCE).
★ 6 · created 2025-12-05
- EynaExp/CVE-2025-55182-POC ↗Trust ok 100
Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages)
★ 6 · created 2025-12-04
- Jenderal92/CVE-2025-55182-React2shell ↗Trust ok 100
CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE
★ 6 · created 2026-05-25
- jensnesten/React2Shell-PoC ↗Trust ok 100
RCE exploit PoC for CVE-2025-55182 and CVE-2025-66478 in Next.js and React Server Components with scanner and exploitation tools.
★ 6 · created 2025-12-23
- keklick1337/CVE-2025-55182-golang-PoC ↗Trust ok 100
CVE-2025-55182 React Server Components RCE - Go PoC
★ 6 · created 2025-12-06
- LemonTeatw1/CVE-2025-55182-exploit ↗Trust ok 100
This is CVE-2025-55182 exploit
★ 6 · created 2025-12-07
React2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478)
★ 6 · created 2025-12-05
- raivenLockdown/WEB-CLI_RCE_React2Shell ↗Trust ok 100
WEB-CLI_RCE_React2Shell is an educational PoC exploit tool for CVE-2025-55182, a critical Prototype Pollution flaw in Next.js applications using React Server Components. Designed for CTFs and research, it features a single-command mode, an interactive web CLI, and reverse shell capabilities to demonstrate RCE.
★ 6 · created 2025-12-12
- rix4uni/CVE-2025-55182 ↗Trust ok 100
A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.
★ 6 · created 2025-12-10
- Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478 ↗Trust ok 100
Scanner for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Track and remediate a critical React Server Components (RSC) / Flight protocol vulnerability campaign impacting react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack, and RSC-enabled frameworks like Next.js.
★ 6 · created 2025-12-04
- ZihxS/check-react-rce-cve-2025-55182 ↗Trust ok 100
Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects
★ 6 · created 2025-12-05
- CirqueiraDev/MassExploit-CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 RCE - Massive Scanner POC
★ 5 · created 2025-12-06
- hidden-investigations/react2shell-scanner ↗Trust ok 100
Precision-Based Detection of RSC/Next.js Remote Code Execution Vulnerabilities (CVE-2025-55182, CVE-2025-66478)
★ 5 · created 2025-12-14
- kondukto-io/vulnerable-next-js-poc ↗Trust ok 100
POC for React2Shell (CVE-2025-55182)
★ 5 · created 2025-12-09
- pkrasulia/CVE-2025-55182-NextJS-RCE-PoC ↗Trust ok 100
Working Proof of Concept (PoC) for CVE-2025-55182 (React2Shell) - Unauthenticated Remote Code Execution in Next.js 15.0.0 via React Server Components
★ 5 · created 2025-12-10
- se1zer/Nextjs_Exploit_Tool ↗Trust ok 100
Next.js RSC RCE Exploit Tool (CVE-2025-55182)
★ 5 · created 2026-07-16
- Tiger-Foxx/exploit-react-CVE-2025-55182 ↗Trust ok 100
This tool is a Proof of Concept (PoC) intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author (Tiger-Foxx) assumes no responsibility for misuse.
★ 5 · created 2025-12-11
- xiaopeng-ye/react2shell-detector ↗Trust ok 100
A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications
★ 5 · created 2025-12-08
- alfazhossain/CVE-2025-55182-Exploiter ↗Trust ok 100
CVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve
★ 4 · created 2025-12-09
- c0rydoras/CVE-2025-55182 ↗Trust ok 100
some notes && (somewhat?) poc-adjacent stuff for CVE-2025-55182
★ 4 · created 2025-12-04
- grp-ops/react2shell ↗Trust ok 100
Lightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 / CVE-2025-66478).
★ 4 · created 2025-12-05
- hualy13/CVE-2025-55182 ↗Trust ok 100
★ 4 · created 2025-12-05
- olezhaku/react2shell-toolkit ↗Trust ok 100
Toolkit for CVE-2025-55182, also known as React2Shell.
★ 4 · created 2026-06-12
- RavinduRathnayaka/CVE-2025-55182-PoC ↗Trust ok 100
React2Shell (CVE-2025-66478): A Python-based Proof of Concept for Critical Remote Code Execution (RCE) in Next.js Server Components. Features an interactive CLI, custom payload injection, and cleaner output formatting. For educational research only.
★ 4 · created 2025-12-18
- rubensuxo-eh/react2shell-exploit ↗Trust ok 100
React2Shell-Exploit — Complete exploitation framework for CVE-2025-55182, including Python exploit, Docker vulnerable lab, Burp Suite manual and automated exploitation, Nuclei detection template, and validated testing workflow. Developed for penetration testing and educational research.
★ 4 · created 2025-12-06
- santihabib/CVE-2025-55182-analysis ↗Trust ok 100
★ 4 · created 2025-12-03
- ToritoIO/Torito-R2S ↗Trust ok 100
Torito React2Shell Scanner & Exploit Tool (CVE-2025-55182 / 66478)
★ 4 · created 2025-12-07
- Updatelap/CVE-2025-55182 ↗Trust ok 100
React2Shell Scanner
★ 4 · created 2025-12-26
- xkillbit/cve-2025-55182-scanner ↗Trust ok 100
★ 4 · created 2025-12-04
- yanoshercohen/React2Shell_CVE-2025-55182 ↗Trust ok 100
React2Shell (CVE-2025-55182) Exploit
★ 4 · created 2025-12-05
- AggressiveUser/React2Hell ↗Trust ok 100
[React2Hell] Next.js/React Server RCE Exploit — CVE-2025-55182
★ 3 · created 2025-12-08
A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications
★ 3 · created 2025-12-11
React2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478) Full Script
★ 3 · created 2025-12-19
- Cillian-Collins/CVE-2025-55182 ↗Trust ok 100
A proof of concept exploit script for CVE-2025-55182
★ 3 · created 2025-12-04
- Dh4v4l8/CVE-2025-55182-poc-tool ↗Trust ok 100
★ 3 · created 2025-12-07
- hidden-investigations/react2shell-vulnlab ↗Trust ok 100
A modern Next.js vulnerable web app themed as a news / blog portal for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.
★ 3 · created 2025-12-13
- hoosin/CVE-2025-55182 ↗Trust ok 100
★ 3 · created 2025-12-05
This is an easy to use PoC script to exploit React2Shell-CVE-2025-55182 Nextjs vulnerability. This will help to gain a reverse shell.
★ 3 · created 2025-12-07
Async RCE scanner for CVE-2025-55182 / CVE-2025-66478 — prototype-pollution → code execution via React Server Actions.
★ 3 · created 2026-02-28
- jf0x3a/CVE-2025-55182-exploit ↗Trust ok 100
RCE Auto exploit for CVE-2025-55182
★ 3 · created 2025-12-04
- joelvaiju/react2shell-CVE-2025-55182-poc ↗Trust ok 100
a simple react2shell poc with basic waf bypass
★ 3 · created 2025-12-09
- M0onPu15e/next.js-scanner ↗Trust ok 100
检测针对 CVE-2025-55182（React 服务器组件远程代码执行漏洞）的扫描器
★ 3 · created 2025-12-04
- MammaniNelsonD/React2P4IM0Nshell ↗Trust ok 100
💥Extension Tool para Auditoría y Explotación avanzada RCE/Source Leak/Dos (CVE-2025-55182/83/84) para entornos Next.js y React Server Components (RSC) directamente desde tu navegador + Laboratorio Vulnerable❌
★ 3 · created 2025-12-14
React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0, including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack, contain a remote code execution vulnerability.
★ 3 · created 2025-12-06
- nxgn-kd01/react2shell-scanner ↗Trust ok 100
Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.
★ 3 · created 2025-12-04
- Syrins/CVE-2025-55182-React2Shell-RCE ↗Trust ok 100
A modern, user-friendly GUI application for detecting and exploiting the CVE-2025-55182 vulnerability in React Server Components. Built with Python and Tkinter, featuring a sleek neon-themed interface for scanning targets, executing shell commands, and viewing live console output.
★ 3 · created 2025-12-08
- techgaun/cve-2025-55182-scanner ↗Trust ok 100
★ 3 · created 2025-12-09
- timsonner/React2Shell-CVE-2025-55182 ↗Trust ok 100
POC and lab setup
★ 3 · created 2025-12-08
- TrixSec/CVE-2025-55182-Scanner ↗Trust ok 100
A hybrid security scanner for detecting CVE-2025-55182 in Next.js and Waku applications. Features combined static code analysis and safe dynamic verification for DevSecOps workflows.
★ 3 · created 2025-12-13
- VeilVulp/RscScan-cve-2025-55182 ↗Trust ok 100
RscScan: Professional cross-platform vulnerability scanner for Next.js Server Actions (CVE-2025-55182). Detects critical RCE flaws with multi-threaded scanning, real-time analytics, and multi-language support. Built with Electron & React.
★ 3 · created 2025-12-10
- VolksRat71/react2shellexploitvisualized ↗Trust ok 100
Interactive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner, and Stakeholder. Audio synced via ElevenLabs + Whisper.
★ 3 · created 2025-12-11
- yz9yt/React2Shell-CTF ↗Trust ok 100
A CTF challenge based on CVE-2025-55182 Vulnerability
★ 3 · created 2025-12-10
- ceh-aditya-raj/CVE-2025-55182 ↗Trust ok 100
Proof-of-concept research tool for CVE-2025-55182, a critical unauthenticated RCE in Next.js App Router caused by server-side object injection in React Server Components and Server Actions, including UTF-16LE WAF evasion techniques.
★ 2 · created 2025-12-17
Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation, Shodan/Censys mass scan, auto-pwn + reverse shells, Nuclei templates, K8s lab & C2 dashboard. Authored by Sudeepa Wanigarathna – strictly for authorized red team and penetration testing.
★ 2 · created 2025-12-10
- CymulateResearch/React2Shell-Scanner ↗Trust ok 100
React2Shell Scanner (CVE-2025-55182 & CVE-2025-66478)
★ 2 · created 2025-12-04
- cypholab/evilact ↗Trust ok 100
Fast scanner for detecting and confirming Next.js RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).
★ 2 · created 2025-12-06
- devianntsec/CVE-2025-55182 ↗Trust ok 100
Advanced security research on CVE-2025-55182 (React2Shell). Features an exploitation framework with 6 functional impact scenarios (RCE to Secret Exfiltration), an interactive reverse shell, and a complete laboratory. Portfolio piece demonstrating deep analysis of Prototype Pollution and Insecure Deserialization in React Server Components
★ 2 · created 2026-03-25
- dr4xp/react2shell ↗Trust ok 100
A critical vulnerability in React Server Components affecting React 19 (CVE-2025-55182) and frameworks that use it like Next.js (CVE-2025-66478).
★ 2 · created 2025-12-09
- Faithtiannn/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182漏洞检测工具
★ 2 · created 2026-01-11
- fullhunt/react2shell-test-server ↗Trust ok 100
A test server for demonstrating and testing React2Shell (CVE-2025-55182) vulnerability
★ 2 · created 2025-12-06
- guiimoraes/react2shell-evolved ↗Trust ok 100
A evolved version of assetnote CVE-2025-55182 scanner
★ 2 · created 2025-12-24
- kindone09/CVE-2025-55182 ↗Trust ok 100
★ 2 · created 2025-12-05
- l0n3m4n/CVE-2025-55182-Waf ↗Trust ok 100
CVE-2025-55182 RCE vulnerability in Next.js/React RSC servers (exploit and scanner)
★ 2 · created 2025-12-06
- LC-pro/CVE-2025-55182-EXP ↗Trust ok 100
★ 2 · created 2025-12-11
- logesh-GIT001/CVE-2025-55182 ↗Trust ok 100
"One crafted HTTP request can compromise your entire server." — React Security Team, Dec 2025
★ 2 · created 2025-12-05
- LucasPDiniz/CVE-2025-55182 ↗Trust ok 100
React2Shell Vulnerability
★ 2 · created 2025-12-08
- lucyz1125/CVE-2025-55182-Next.js-RCE ↗Trust ok 100
Nextjs RCE Exploit
★ 2 · created 2026-01-05
- mantvmass/react2shell ↗Trust ok 100
A CLI tool that exploits vulnerabilities in React Server Components and Server Actions (CVE-2025-55182, CVE-2025-66478) to achieve remote code execution (RCE) on vulnerable servers.
★ 2 · created 2025-12-13
- MemerGamer/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182
★ 2 · created 2026-01-22
- mingyisecurity-lab/CVE-2025-55182-TOOLS ↗Trust ok 100
A Comprehensive CVE-2025-55182 Detection and Security Assessment Tool
★ 2 · created 2025-12-04
- MuhammadUwais/React2Shell ↗Trust ok 100
A Firefox extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications.
★ 2 · created 2026-02-03
★ 2 · created 2025-12-11
- oways/React2shell-CVE-2025-55182-checker ↗Trust ok 100
★ 2 · created 2025-12-04
- philparzer/nextjs-react2shell-detect ↗Trust ok 100
chrome extension to detect next.js sites vulnerable to CVE-2025-55182 (react2shell)
★ 2 · created 2025-12-06
- Rat5ak/CVE-2025-55182-React2Shell-RCE-POC ↗Trust ok 100
This repository documents research into deserialization behavior within Next.js React Server Components (RSC) using the Flight protocol. It focuses on how malformed multipart bodies combined with Server Action request handling can lead to prototype traversal and execution primitives on certain builds.
★ 2 · created 2025-12-05
- SainiONHacks/CVE-2025-55182-Scanner ↗Trust ok 100
A standalone GUI tool to detect and demonstrate the **React Server Components Remote Code Execution (RCE)** vulnerability (CVE-2025-55182) in Next.js applications.
★ 2 · created 2025-12-07
- Sairbo/Unihackers---CVE-2025-55182- ↗Trust ok 100
★ 2 · created 2026-01-23
NodeJS-based exploit script and scanner for the React Server Components "React2Shell" vulnerability (CVE-2025-55182).
★ 2 · created 2025-12-13
React2shell-web-scanner
★ 2 · created 2025-12-08
- snipevx/React2Shell-POC ↗Trust ok 100
React2Shell (CVE-2025-55182) POC
★ 2 · created 2026-02-12
- SpeatX/React2Shell-CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.
★ 2 · created 2026-05-24
- subhdotsol/CVE-2025-55182 ↗Trust ok 100
This project provides a fully functional demonstration of CVE-2025-55182 (React2Shell) - a critical Remote Code Execution vulnerability in React Server Components and Next.js.
★ 2 · created 2025-12-15
- sudo-Yangziran/CVE-2025-55182POC ↗Trust ok 100
★ 2 · created 2025-12-04
- theman001/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 React RCE Test Program
★ 2 · created 2025-12-08
- vulncheck-oss/cve-2025-55182 ↗Trust ok 100
VulnCheck CVE-2025-55182 react2shell
★ 2 · created 2025-12-08
- xiaoLvChen/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182（React Server Components 反序列化远程代码执行漏洞）
★ 2 · created 2026-01-01
- zamdevio/r2s ↗Trust ok 100
Advanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF bypass, and comprehensive reporting.
★ 2 · created 2025-12-06
- ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner ↗Trust ok 100
★ 2 · created 2025-12-05
- 0xSalm0n/CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2025-12-08
- 0xsj/CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2025-12-08
- 3SC0133/CVE-2025-55182-React2Shell ↗Trust ok 100
Technical analysis and proof of concept (PoC) for CVE-2025-55182 (React2Shell), a critical RCE vulnerability in React Server Components. Includes a Python tool, Docker lab, and documentation for reproduction and validation in authorized environments.
★ 1 · created 2026-08-04
A containerized testing environment for CVE-2025-55182, a critical (10.0 CVSS) Remote Code Execution vulnerability in React Server Components.
★ 1 · created 2025-12-05
- Airis101/CVE-2025-55182-analysis ↗Trust ok 100
浅谈React Server Components RCE 漏洞分析
★ 1 · created 2025-12-05
- AkhmadKholmurodov/React2Shell_Exploit ↗Trust ok 100
I created simple react2shell CVE-2025-55182 python exploit
★ 1 · created 2026-06-09
- alessiodos/react2shell-scanner ↗Trust ok 100
CVE-2025-55182 & CVE-2025-66478 Detection Tool for Next.js RSC RCE
★ 1 · created 2025-12-06
- aliksir/nextjs-security-scanner ↗Trust ok 100
Bash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.
★ 1 · created 2026-04-03
- ancs21/react2shell-scanner-rust ↗Trust ok 100
Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications (Rust)
★ 1 · created 2025-12-09
- arashiyans/CVE-2025-55182-CVE-2025-66478 ↗Trust ok 100
scanner testing
★ 1 · created 2025-12-08
- Archerkong/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 poc
★ 1 · created 2025-12-06
- Atlantis02-sec/Vulnerability-assessment ↗Trust ok 100
nmap nse for detecting React2Shell (CVE-2025-55182)
★ 1 · created 2025-12-05
- Benrich127N/react2shell_analyzer ↗Trust ok 100
a dart package to analyze CVE-2025-55182 react2shell
★ 1 · created 2025-12-08
- BrianLopezM99/react2shell-CVE-2025-55182 ↗Trust ok 100
An exploitation tool for the Next.js vulnerability CVE-2025-55182 that allows remote command execution through a poisoning prototype in React Server Components.
★ 1 · created 2026-02-09
- cahyod/react2shell ↗Trust ok 100
Alat ini mendeteksi potensi kerentanan React2Shell (CVE-2025-55182) dalam proyek React dengan memeriksa: - File `package.json` dan file lock untuk paket rentan - Direktori `node_modules` untuk dependensi yang terpengaruh - URL secara pasif untuk deteksi jarak jauh
★ 1 · created 2025-12-08
- captain4554/captain4554.github.io ↗Trust ok 100
🔍 Scan for CVE-2025-55182 vulnerabilities with a hybrid tool that combines static and dynamic analysis for improved security assessments.
★ 1 · created 2026-01-02
- captain4554/CVE-2025-55182-Scanner ↗Trust ok 100
🛡️ Scan and assess vulnerabilities in Next.js/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.
★ 1 · created 2026-01-02
- ceortiz33/CVE-2025-55182 ↗Trust ok 100
Proof of Concept for React2Shell vulnerability
★ 1 · created 2025-12-05
Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and professional reporting (JSON/HTML/PDF). Authorized testing only.
★ 1 · created 2026-08-07
- clevernyyyy/CVE-2025-55182-Dockerized ↗Trust ok 100
★ 1 · created 2025-12-04
- cyberleelawat/CVE-2025-55182 ↗Trust ok 100
A critical Remote Code Execution (RCE) vulnerability affecting the React Server Components (RSC) implementation within multiple packages including.
★ 1 · created 2025-12-07
- DelvyGonzalez/react2shell-security-toolkit ↗Trust ok 100
Security toolkit to detect CVE-2025-55182 (React2Shell) vulnerability
★ 1 · created 2025-12-07
- emadshanab/POC-for-CVE-2025-55182 ↗Trust ok 100
POC for CVE-2025-55182
★ 1 · created 2025-12-05
- Emiyelbarto/CVE-2025-55182-PoC ↗Trust ok 100
Poc for CVE-2025-55182
★ 1 · created 2025-12-04
- EQSTLab/CVE-2025-55182 ↗Trust ok 100
React2Shell
★ 1 · created 2025-12-16
- FurkanKAYAPINAR/ReactNext2Shell ↗Trust ok 100
CVE-2025-55182 and CVE-2025-66478
★ 1 · created 2025-12-08
- gagaltotal/tot-react-rce-CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 – CVE-2025-66478 – React2Shell
★ 1 · created 2025-12-12
★ 1 · created 2025-12-05
★ 1 · created 2026-02-10
- Gymnott1/CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2025-12-10
- hakkuri01/r2rs ↗Trust ok 100
Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing
★ 1 · created 2026-05-31
- hamm0nz/react2shell-audit ↗Trust ok 100
A lightweight, recursive Bash script to detect Next.js and React Server DOM versions vulnerable to CVE-2025-55182 (React2Shell) in local projects.
★ 1 · created 2025-12-08
- harness-security-labs/CVE-2025-55182-checker ↗Trust ok 100
React/Next.js React4Shell RCE CVE-2025-55182 checker
★ 1 · created 2025-12-04
- Herick-Costa/CVE-2025-55182-React2Shell-RCE ↗Trust ok 100
React2Shell (CVE-2025-55182) PoC
★ 1 · created 2026-06-29
- HUAHUAI23/CVE-2025-55182-POC ↗Trust ok 100
★ 1 · created 2025-12-08
- ihsansencan/React2Shell-CVE-2025-55182 ↗Trust ok 100
* React2Shell-CVE-2025-55182
★ 1 · created 2025-12-09
- imbas007/POC-CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2025-12-05
- indra-031/React2Shell-Exploit-CVE-2025-55182 ↗Trust ok 100
React2Shell is a proof-of-concept exploit for CVE-2025-55182 affecting vulnerable React Server Components (RSC) implementations in Next.js
★ 1 · created 2026-07-24
- IrsyadSEC/CVE-2025-55182-MassPayloadAttack ↗Trust ok 100
CVE-2025-55182 payload
★ 1 · created 2025-12-12
- itsismarcos/Bot-exploit-CVE-2025-55182 ↗Trust ok 100
Mass Bot Exploit
★ 1 · created 2025-12-26
- ivaavimusic/React19-fix-vibecoders ↗Trust ok 100
CVE-2025-55182 Fix for Vibe Coders
★ 1 · created 2025-12-04
- j0lt-github/react2shell-burp ↗Trust ok 100
Burp Suite extension for identifying the React Server Components unsafe deserialization vulnerability (React2Shell / CVE-2025-55182). It provides a focused UI tab, context-menu actions, active-scanner integration, and optional Burp Collaborator confirmation.
★ 1 · created 2025-12-11
- JahazielLem/NSE_CVE-2025-55182 ↗Trust ok 100
Nmap NSE script for scanning React2Shell (CVE-2025-55182)
★ 1 · created 2025-12-10
script to help solve the lab on hackviser covering (CVE-2025-55182)
★ 1 · created 2025-12-26
- keshavyaduvans/cve-2025-55182 ↗Trust ok 100
★ 1 · created 2025-12-09
- lamaper/CVE-2025-55182-Toolbox ↗Trust ok 100
★ 1 · created 2025-12-19
- luoluoqingge/CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2026-03-18
- m3ngx1ng/CVE-2025-55182-GUI ↗Trust ok 100
CVE-2025-55182 漏洞检测与利用工具（GUI版）
★ 1 · created 2026-01-03
- M4rc3l08/ReactorWriteUp-HackTheBox ↗Trust ok 100
Reactor es una máquina Linux fácil vulnerable a CVE-2025-55182 (React2Shell), RCE sin autenticación en React Server Components. Accedemos como node, crackeamos un hash MD5 de una base de datos SQLite y pivotamos a engineer por SSH. La escalada abusa del flag --inspect de Node.js para ejecutar código como root vía depuración V8.
★ 1 · created 2026-10-11
- M4rgs/CVE-2025-55182-React2Shell-Exploit ↗Trust ok 100
A proof-of-concept tool for demonstrating the critical React2Shell vulnerability
★ 1 · created 2025-12-16
- Machine-farmer/PunchingBag-for-React2Shell ↗Trust ok 100
Intentionally vulnerable Next.js app for CVE-2025-55182 security research and CTF challenges
★ 1 · created 2025-12-11
- MedusaSH/POC-CVE-2025-55182 ↗Trust ok 100
PoC CVE-2025-55182
★ 1 · created 2025-12-04
- mivmi/CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2025-12-15
Check if your server is affected by CVE-2025-55182 & CVE-2025-66478
★ 1 · created 2025-12-13
- mrmtwoj/React2Shell-CVE-2025-55182 ↗Trust ok 100
Educational / research tool related to React / Next.js vulnerability CVE‑2025‑55182 (“React2Shell”).
★ 1 · created 2025-12-11
- Night-have-dreams/CVE-2025-55182-PoC ↗Trust ok 100
CVE-2025-55182 PoC
★ 1 · created 2025-12-08
- orgito1015/CVE-2025-55182-Researching-process ↗Trust ok 100
★ 1 · created 2026-02-18
- Pa2sw0rd/exploit-CVE-2025-55182-poc ↗Trust ok 100
This POC demonstrates CVE-2025-55182 using actual `react-server-dom-webpack@19.0.0` vulnerable code.
★ 1 · created 2025-12-04
- ProwlSec/React2Shell ↗Trust ok 100
An advanced command-line framework for discovery, validation, and exploitation of CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications using React Server Components (RSC).
★ 1 · created 2025-12-14
- Qixinlee/CVE-2025-55182-Scanner ↗Trust ok 100
Automated scanner for CVE-2025-55182: a critical RCE vulnerability in React Server Components and Next.js.
★ 1 · created 2025-12-07
- racall/cve-2025-55182-node ↗Trust ok 100
CVE-2025-55182 Next.js RCE Exploit Tool
★ 1 · created 2025-12-08
- rahuulmiishra/react2shell-CVE-2025-55182 ↗Trust ok 100
★ 1 · created 2026-01-03
- rapticore/ore_react2shell_scanner ↗Trust ok 100
CVE-2025-55182 (React2Shell) Scanner
★ 1 · created 2025-12-06
- renewablehacking/CVE-2025-55182-React-19.2.0 ↗Trust ok 100
★ 1 · created 2026-05-23
- rl0x01/CVE-2025-55182_PoC ↗Trust ok 100
Proof-of-Concept RCE pour CVE‑2025‑55182 exploitant le protocole React Flight sur Next.js App Router.
★ 1 · created 2025-12-05
- rocklambros/React2Shell_Hunter ↗Trust ok 100
AWS Organization-wide detection toolkit for CVE-2025-55182 & CVE-2025-66478 (React Server Components / Next.js RCE vulnerabilities)
★ 1 · created 2025-12-06
- rsch-io/CVE-2025-55182-React2Shell ↗Trust ok 100
React2Shell (CVE-2025-55182) proof-of-concept (PoC) exploit demonstrating a CRITICAL remote code execution (RCE) vulnerability in modern web frameworks using React Server Components (RSC).
★ 1 · created 2025-12-09
- S3cr3t-SDN/React4Shell ↗Trust ok 100
Exploit Code for React2Shell RCE vulnerability (CVE-2025-55182) affecting React Server Components 19.0.0-19.2.0. Exploits unsafe deserialization for unauthenticated remote code execution.
★ 1 · created 2025-12-22
- Saturate/CVE-2025-55182-react2shell ↗Trust ok 100
A bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications. And a PoC nodejs script
★ 1 · created 2025-12-05
- Shield-Cyber/react2shell-scanner ↗Trust ok 100
Scanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.
★ 1 · created 2025-12-08
- sohaibeb/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 PoC Exploit
★ 1 · created 2025-12-06
- songsanggggg/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 漏洞利用GUI,PoC / Exploit for CVE-2025-55182 & CVE-2025-66478
★ 1 · created 2025-12-04
Full walkthrough of HTB's Reactor machine — exploit CVE-2025-55182 to gain a shell, then get root via an exposed Node.js debugger. Step-by-step with screenshots.
★ 1 · created 2026-05-28
- subzer0x0/React2Shell ↗Trust ok 100
React2Shell (CVE-2025-55182) – An intentionally vulnerable Next.js application created for educational and research purposes.
★ 1 · created 2025-12-05
- sun977/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 检测方式和攻击利用
★ 1 · created 2025-12-09
- theman001/CVE-2025-55182_PoC-Test-Server ↗Trust ok 100
CVE-2025-55182 React RCE Test Server
★ 1 · created 2025-12-10
- umairahmadh/react-vuln-scanner ↗Trust ok 100
A bash script to scan your server for React applications vulnerable to **CVE-2025-55182** — a critical remote code execution vulnerability (CVSS 10.0) in React Server Components.
★ 1 · created 2025-12-07
- UmmItKin/CVE-2025-55182-PoC ↗Trust ok 100
react2shell PoC with Go / CVE-2025-55182
★ 1 · created 2025-12-07
- vonuyvicoo/nextploiter ↗Trust ok 100
NextJS exploiter for CVE-2025-55182 and more.
★ 1 · created 2025-12-21
- VVVI5HNU/CVE-2025-55182 ↗Trust ok 100
Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components.
★ 1 · created 2025-12-14
[우리 FISA] 기술 세미나 우승 - 클라우드 서비스 개발 6기 3팀 - React2Shell (CVE-2025-55182) 분석 및 연구
★ 1 · created 2026-02-02
- Wyl-cmd/CVE-2025-55182 ↗Trust ok 100
针对 Next.js 原型污染漏洞 (CVE-2025-55182) 的高效批量检测工具。
★ 1 · created 2026-02-13
- xkey8/react2shell ↗Trust ok 100
PoC for React2Shell (CVE-2025-55182)
★ 1 · created 2025-12-05
- xxxTectationxxx/React2Shell-CVE-Lab ↗Trust ok 100
A self-hosted vulnerable Next.js environment running on Docker for simulating CVE-2025-55182. Built for educational security research and CTF practice.
★ 1 · created 2025-12-20
- Y3B3L4Y3/CVE-2025-55182-test ↗Trust ok 100
★ 1 · created 2025-12-05
- Yyax13/CVE-2025-55182 ↗Trust ok 100
RCE exploitation tool targeting CVE-2025-55182, a critical vulnerability in React Server Components (RSC) affecting React 19.0.0 - 19.2.0 and Next.js applications.
★ 1 · created 2025-12-09
- 0x0asif/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2026-03-29
- 0xBlackash/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182
★ 0 · created 2026-02-23
- 0xN7y/CVE-2025-55182 ↗Trust ok 100
Poc for CVE-2025-55182
★ 0 · created 2025-12-06
- 0xPThree/cve-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-04
- 0xROI/CVE-2025-55182 ↗Trust ok 100
Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing any problem fix it yourself.
★ 0 · created 2025-12-26
- 4nuxd/React2Shell ↗Trust ok 100
R2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It provides an interactive shell with advanced features for penetration testing, including file transfer, persistence, enumeration, privilege escalation checks, and more.
★ 0 · created 2025-12-11
- aastikgakhar/CVE-2025-55182-react2shell ↗Trust ok 100
Detects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.
★ 0 · created 2025-12-06
- ahmedshamsddin/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-07
★ 0 · created 2025-12-05
- AliAbdollahiii/react2shell_detector ↗Trust ok 100
Heuristic security scanner for detecting React Server Components (RSC) vulnerabilities, including React2Shell-style behavior (CVE-2025-55182). Safe, non-exploitative, multi-target capable.
★ 0 · created 2025-12-08
- alyaapm/CVE-2025-55182-shellinteractive ↗Trust ok 100
★ 0 · created 2024-11-29
- amikanev/CVE-2025-55182-LAB ↗Trust ok 100
★ 0 · created 2026-03-30
- amir-malek/react-cve-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-09
- amirali-ramezani/react2shell-CVE-2025-55182- ↗Trust ok 100
★ 0 · created 2025-12-29
- andressuarezmonk/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-07
- androidteacher/REACT-CVE-2025-55182-Lab ↗Trust ok 100
Lab with PoC
★ 0 · created 2026-02-26
- Ankitspandey07/React2Shell ↗Trust ok 100
CVE-2025-55182-advanced-scanner
★ 0 · created 2025-12-09
- aquinn-r7/CVE-2025-55182-VulnCheckPOC ↗Trust ok 100
Functional Python POC to test if servers are vulnerable to CVE-2025-55182
★ 0 · created 2025-12-04
- aseemyash/krle ↗Trust ok 100
CVE-2025-55182 & CVE-2025-66478 proof of concepts
★ 0 · created 2025-12-11
- atastycookie/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface
★ 0 · created 2025-12-03
- bakhod1r/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-10
- Bashamega/react-CVE-2025-55182-fixer ↗Trust ok 100
Patches CVE-2025-55182 in your repositories
★ 0 · created 2025-12-06
- BBD-YZZ/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182(命令执行、反弹shell、注入内存马)
★ 0 · created 2026-01-20
★ 0 · created 2026-02-13
- bigbluewhale111/CVE-2025-55182-LAB ↗Trust ok 100
This is a lab for reproducing CVE-2025-55182.
★ 0 · created 2025-12-24
- byte16384/CVE-2025-55182 ↗Trust ok 100
proof
★ 0 · created 2025-12-09
- Call123X/-cve-2025-55182 ↗Trust ok 100
cve-2025-55182
★ 0 · created 2025-12-15
- carlosaruy/CVE-2025-55182 ↗Trust ok 100
a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test and understand the vulnerability.
★ 0 · created 2025-12-04
- chitoz1300/React2Shell-CVE-2025-55182 ↗Trust ok 100
* React2Shell-CVE-2025-55182
★ 0 · created 2025-12-08
- ckex/test-vuln ↗Trust ok 100
a controlled environment to test CVE-2025-55182.
★ 0 · created 2025-12-23
- CyberPrince-hub/React2shell-ultimate-scanner ↗Trust ok 100
CVE-2025-55182-Advanced-Scanner is an automated security tool designed to detect and validate the CVE-2025-55182 vulnerability efficiently. it helps security researchers and bug bounty hunters quickly identify affected targets with accurate results and minimal false positives.
★ 0 · created 2025-12-14
- d0cnull/nextjs-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-16
- Darker-Ink/react-ssr-vulnerability ↗Trust ok 100
This is a POC script for CVE-2025-55182 (React SSR RCE)
★ 0 · created 2025-12-05
★ 0 · created 2026-01-29
React2Shell Vulnerability Verification Script (React2Shell also known as CVE-2025-55182).
★ 0 · created 2025-12-18
- DevVaibhav07/POC-CVE-2025-55182 ↗Trust ok 100
POC-CVE-2025-55182
★ 0 · created 2025-12-09
- dhananjayakumarn/CVE-2025-55182-Lab ↗Trust ok 100
A hands-on lab for understanding and exploiting CVE-2025-55182 (React2Shell) - Remote Code Execution in React Server Components
★ 0 · created 2025-12-13
- dissy123/cve-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-04
- DoobTheGoober/CVE-2025-55182-Test-Server ↗Trust ok 100
Play with react2shell in a safe environment!
★ 0 · created 2025-12-07
- ducducuc111/CVE-2025-55182-poc ↗Trust ok 100
★ 0 · created 2025-12-04
- eagle-nett/React2Shell-PoC-CVE-2025-55182 ↗Trust ok 100
Khai thác lỗ hổng bảo mật CVE-2025-55182
★ 0 · created 2026-03-24
- en0f/CVE-2025-55182-poc-json ↗Trust ok 100
CVE-2025-55182-poc-json
★ 0 · created 2026-01-07
- ethicalrohitt/React2Shell_cve-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-07
- Evillm/CVE-2025-55182-PoC ↗Trust ok 100
★ 0 · created 2026-02-04
★ 0 · created 2025-12-11
- eytannatye/R2S_CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-09
- f0xyx/CVE-2025-55182-Scanner ↗Trust ok 100
Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components
★ 0 · created 2025-12-05
★ 0 · created 2026-01-16
- fankh/cve-2025-55182-test-lab-windows ↗Trust ok 100
★ 0 · created 2025-12-06
- Farhan9488/CVE-2025-55182-research ↗Trust ok 100
🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.
★ 0 · created 2025-12-24
- FurkanKAYAPINAR/React-Next-Scanner ↗Trust ok 100
CVE-2025-55182 and CVE-2025-66478
★ 0 · created 2025-12-08
- gahoole77/gahoole77.github.io ↗Trust ok 100
🔍 Discover and scan vulnerable Next.js instances to protect your infrastructure from critical RCE vulnerabilities like CVE-2025-55182.
★ 0 · created 2026-01-04
- garux-sec/PoC-react2shell-CVE-2025-55182 ↗Trust ok 100
PoC-react2shell-CVE-2025-55182
★ 0 · created 2025-12-09
- ghostn4444/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 - Tool React2Shell
★ 0 · created 2026-01-02
- git0xLai/React2ShellPoC ↗Trust ok 100
This repository provides a proof-of-concept for CVE-2025-55182 (React2Shell), a remote code execution vulnerability in React Server Components. It demonstrates how the exploit works, including the payload and impact.
★ 0 · created 2025-12-30
- Golden-Secure/CVE-2025-55182 ↗Trust ok 100
Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security
★ 0 · created 2025-12-05
- Goultarde/CVE-2025-55182-React2Shell-Lab ↗Trust ok 100
★ 0 · created 2025-12-31
- grejh0t/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-13
- gunyakit/CVE-2025-55182-PoC-exploit ↗Trust ok 100
Next.js RCE via React Server Functions
★ 0 · created 2025-12-10
- h0tak88r/next88 ↗Trust ok 100
High-performance Go implementation for detecting React Server Components RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).
★ 0 · created 2025-12-13
- H4R335HR/reactshell ↗Trust ok 100
Interactive shell client for React Server Components RCE exploitation via __proto__ pollution (CVE-2025-55182)
★ 0 · created 2026-02-17
- HackIndex-io/React2Shell-CVE-2025-55182 ↗Trust ok 100
A HackIndex.io sandbox environment for the React2Shell vulnerability.
★ 0 · created 2026-01-02
- hndko/react2shell-rce-autobot ↗Trust ok 100
🎯 Automated vulnerability scanner for React2Shell RCE - Google dorking + safe detection for CVE-2025-55182/CVE-2025-66478 (CVSS 10.0)
★ 0 · created 2025-12-30
- huangzccn/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182
★ 0 · created 2025-12-05
- hujiaozhuzhu/CVE-2025-55182_liyon ↗Trust ok 100
CVE-2025-55182
★ 0 · created 2026-04-02
- hulh122/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-15
- hunter24x24/CVE-2025-55182-mass ↗Trust ok 100
★ 0 · created 2025-12-07
- hyan0116/Next.js-RCE-CVE-2025-55182 ↗Trust ok 100
next.js rce exploit
★ 0 · created 2026-01-05
- I3r1h0n/React2Shell ↗Trust ok 100
My research on CVE-2025-55182
★ 0 · created 2025-12-06
- iamblacksolo2-BugBounty/POC-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-09
- iamblacksolo2-BugBounty/POC2-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-10
- ilixm/PoC-RCE-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-09
- im-hanzou/CVE-2025-55182-POC-SCANNER ↗Trust ok 100
Unified Security Research Tool
★ 0 · created 2025-12-04
- itumo-arigatone/study-CVE-2025-55182 ↗Trust ok 100
試してみるよん
★ 0 · created 2025-12-16
- jan0x190/CVE-2025-55182-Simple-Scanner-main ↗Trust ok 100
★ 0 · created 2025-12-08
- jandelima/cve-2025-55182-poc-test ↗Trust ok 100
★ 0 · created 2025-12-08
- Jaycelation/CVE-2025-55182 ↗Trust ok 100
PoC, Hunting React2Shell about CVE-2025-55182
★ 0 · created 2025-12-09
- joaovicdev/EXPLOIT-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2026-01-04
- joshterrill/CVE-2025-55182-realistic-poc ↗Trust ok 100
a realistic POC demonstrating the missing `hasOwnProperty` check in react-server-dom-webpack@19.0.0
★ 0 · created 2025-12-04
- KingHacker353/R2C-CVE-2025-55182-66478 ↗Trust ok 100
★ 0 · created 2025-12-27
- klassiker/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-04
- knightwolf01/React2Shell ↗Trust ok 100
React2Shell Critical Vulnerability (CVE-2025-55182)
★ 0 · created 2025-12-22
- Kugelbyte/React2Shell-Analysis ↗Trust ok 100
A research report on CVE-2025-55182 (React2Shell).
★ 0 · created 2025-12-13
- l0lsec/cve-2025-55182-lab ↗Trust ok 100
Intentionally vulnerable Next.js RSC Docker lab for CVE-2025-55182 (React2Shell) local testing
★ 0 · created 2026-03-25
- lalaterry/CVE-2025-55182-React2Shell-lab ↗Trust ok 100
★ 0 · created 2025-12-08
- Least-Significant-Bit/CVE-2025-55182 ↗Trust ok 100
Remote code execution for React Server Components 19.0.0 - 19.2.0
★ 0 · created 2026-01-13
- liamromanis101/cve-2025-55182 ↗Trust ok 100
Python3 script that can be used to demonstrate **CVE-2025-55182**. It exploits a server-side JavaScript injection vulnerability in Next.js/React applications, allowing **remote code execution** via malformed multipart form data.
★ 0 · created 2025-12-09
- lowercasenumbers/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 React2Shell PoC
★ 0 · created 2025-12-08
- LQTjim/next-bug-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-08
- luoqichen/CVE-2025-55182-POC ↗Trust ok 100
★ 0 · created 2026-03-06
- lutraat/CVE-2025-55182-React-RSC-Exploit ↗Trust ok 100
Basic Proof of Concept (Poc) Exploit for React RSC - CVE-2025-55182
★ 0 · created 2026-03-12
- LvMalware/CVE-2025-55182 ↗Trust ok 100
Exploit for CVE-2025-55182 (React4Shell)
★ 0 · created 2025-12-08
- Macaroniwdcheese/CVE-2025-55182-Lab ↗Trust ok 100
★ 0 · created 2025-12-08
- mahaveer-choudhary/CVE-2025-55182 ↗Trust ok 100
A Python-based security scanner for detecting and exploiting **React Server Components (RSC)** vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing.
★ 0 · created 2025-12-19
- masterwok/PoC-CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 (React2Shell) PoC: Unauthenticated RCE affecting React 19.x and Next.js < 15.1.4. Exploits vulnerabilities in the RSC Flight protocol.
★ 0 · created 2026-04-10
- mayank729/CVE-2025-55182-scanner ↗Trust ok 100
🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.
★ 0 · created 2022-06-17
- Mayca369/CVE-2025-55182 ↗Trust ok 100
🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.
★ 0 · created 2025-06-06
- MeGaNeKoS/secure-by-default-rce-demo ↗Trust ok 100
Secure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can neutralize a critical Next.js/React Server Actions RCE (CVE-2025-55182 “React2Shell”), with side-by-side safe vs unsafe deployments and exploit logs
★ 0 · created 2025-12-20
- MikeTheHash/CVE-2025-55182 ↗Trust ok 100
A modified and a little boosted exploit for CVE-2025-55182, React2Shell: Pre-authentication Remote Code Execution in React Server Packages
★ 0 · created 2025-12-06
- mohit121312/CVE-2025-55182_full_exploit ↗Trust ok 100
this repo have CVE-2025-55182 full exploit with RCE
★ 0 · created 2025-12-05
- MoisesTapia/http-react2shell ↗Trust ok 100
Detection of the React Server Actions Exploit vector – CVE-2025-55182 / CVE-2025-66478
★ 0 · created 2025-12-09
- monarchfish/cve-2025-55182-poc ↗Trust ok 100
Proof-of-concept for CVE-2025-55182 (React2Shell): unauthenticated RCE in React Server Components / Next.js via Flight protocol deserialization.
★ 0 · created 2026-03-17
- mooowu/cve-2025-55182-poc ↗Trust ok 100
★ 0 · created 2026-01-10
- MrMahile/MassScanning-CVE-2025-55182 ↗Trust ok 100
A lightweight orchestrator and worker scanner setup for running large/continuous scans across split input files. This repository contains orchestration scripts, a Docker-based worker image, and helper scripts to run scans repeatedly and collect results.
★ 0 · created 2026-02-26
An advanced vulnerability scanner for detecting **CVE-2025-55182** and **CVE-2025-66478** - critical Remote Code Execution (RCE) vulnerabilities in Next.js applications using React Server Components (RSC).
★ 0 · created 2025-12-16
- muthaiyanmani/react2shell-checker ↗Trust ok 100
A security vulnerability scanner for detecting the React2Shell vulnerability (CVE-2025-55182) in Next.js and React applications.
★ 0 · created 2025-12-08
- mxm0z/r2s ↗Trust ok 100
A web-based vulnerability scanner for CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in React Server Components.
★ 0 · created 2025-12-05
- MyCompanyOrganization/React2Shell-Kingdom ↗Trust ok 100
"Once upon a time, the Castle of Reactland trusted all Flight messages... until The Imposter arrived." A storytelling CVE-2025-55182 (React2Shell) demo - Medieval-themed vulnerable React Server Components app for security education.
★ 0 · created 2026-01-06
- Namsom007/CVE-2025-55182-Exploit ↗Trust ok 100
CVE-2025-55182 React Server Components Remote Code Execution Exploit Lab
★ 0 · created 2026-01-20
- NathanJ60/react2shell-interactive ↗Trust ok 100
CVE-2025-55182 Interactive PoC - React Server Components RCE - Educational Security Research
★ 0 · created 2025-12-05
- nerium-security/CVE-2025-55182 ↗Trust ok 100
Host-based detection rules for the RCE vulnerability in the React JavaScript framework.
★ 0 · created 2025-12-05
- nexxp90/CVE-2025-55182_RCE_Exploit ↗Trust ok 100
REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch scanning with custom input, structured payload handling, and clear CLI output.
★ 0 · created 2026-03-17
- ngvcanh/CVE-2025-55182-Attack-Analysis ↗Trust ok 100
Real-world attack analysis of CVE-2025-55182 (React2Shell) - React Server Components RCE vulnerability
★ 0 · created 2025-12-05
- niokagi/react-cve-2025-55182 ↗Trust ok 100
Test & Analyze the CVE-2025-55182 vulnerability within Next.js Server Actions
★ 0 · created 2025-12-21
- nomorebreach/POC-CVE-2025-55182 ↗Trust ok 100
POC for CVE-2025-55182 React2Shell
★ 0 · created 2025-12-05
Quyida to‘liq LAB rejasi: demo-vulnerable app → Python PoC → Metasploit exploit skeleton
★ 0 · created 2025-12-16
- oguri-souhei/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 の検証用
★ 0 · created 2025-12-12
- open-flaw/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-19
- orgito1015/CVE-2025-55182-RCE-Exploit ↗Trust ok 100
More exploit-focused; great for security research repos.
★ 0 · created 2025-12-06
- osman-butt/CVE-2025-55182-demo ↗Trust ok 100
Demo of CVE-2025-55182 — Next.js RCE (for educational purposes)
★ 0 · created 2025-12-09
- porsellaj/cve-2025-55182-react2shell-analysis ↗Trust ok 100
Technical analysis of CVE-2025-55182 (React2Shell RCE vulnerability)
★ 0 · created 2026-04-04
- premdanav/react2shelldemo ↗Trust ok 100
This repo contains the scripts you can execute to simulate the (CVE-2025-55182) along with next.js server
★ 0 · created 2025-12-15
- prestonhashworth/cve-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-05
- ps-interactive/cve-2025-55182 ↗Trust ok 100
Vulnerable REACT app in docker container and poc code - for demos
★ 0 · created 2025-12-04
- pwnxpl0it/react2shell-lab ↗Trust ok 100
React2shell vulnerable lab (CVE-2025-55182)
★ 0 · created 2025-12-17
- r4j3sh-com/CVE-2025-55182 ↗Trust ok 100
Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.
★ 0 · created 2025-12-18
- rahul-securify/React2Shell-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-12
- RajChowdhury240/React2Shell-CVE-2025-55182 ↗Trust ok 100
React2Shell | CVE-2025-55182 - React Server Components RCE
★ 0 · created 2025-12-05
- randarts/react-rce ↗Trust ok 100
CVE-2025-55182 취약점에 대한 샘플을 AI와 함께 작성 및 테스트 했습니다.
★ 0 · created 2025-12-08
- rashedhasan090/cve-2025-55182-mitigator ↗Trust ok 100
★ 0 · created 2025-12-18
- robbin0919/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-07
- ryanhafid/PoC_CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-12
- ryanhafid/Scan_CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-12
- RyosukeDTomita/CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182 — React2Shell
★ 0 · created 2026-03-24
- S-Mughal/NextJS-app-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-16
- satriarizka/CVE-2025-55182-Simple-Scanner ↗Trust ok 100
High-fidelity RCE scanner for CVE-2025-55182 affecting Next.js RSC. Supports mass scanning, command execution, and automated recon pipelines. Built for pentesters, researchers, and bounty hunters.
★ 0 · created 2025-12-07
- scumfrog/FiberBreak ↗Trust ok 100
React2Shell Exploitation Tool (CVE-2025-55182)
★ 0 · created 2025-12-16
- Shadowroot97/React2Shell-CVE-2025-55182 ↗Trust ok 100
POC React2Shell-CVE-2025-55182
★ 0 · created 2025-12-12
CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean Markdown report.
★ 0 · created 2025-12-07
- shen771/Blackash-CVE-2025-55182 ↗Trust ok 100
CVE-2025-55182
★ 0 · created 2025-12-04
★ 0 · created 2025-12-05
- shreyas-malhotra/React2Shell-CVE-2025-55182 ↗Trust ok 100
A minimal RCE PoC for CVE-2025-55182
★ 0 · created 2025-12-06
- simantchaudhari/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-15
CVE‑2025‑55182 Detection
★ 0 · created 2025-12-09
- Stonelinks/react-cve-2025-55182 ↗Trust ok 100
malware I found on my server
★ 0 · created 2025-12-09
- tamagorengs/react2shell-poc-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-20
- termireum/react2shell ↗Trust ok 100
React2Shell is a high-performance vulnerability scanner written in Go, specifically designed to detect Server-Side Remote Code Execution (RCE) vulnerabilities in Next.js applications (CVE-2025-55182 & CVE-2025-66478).
★ 0 · created 2026-01-12
- TH-SecForge/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-08
- thekamran/CVE-2025-55182-Proof-of-Concept ↗Trust ok 100
★ 0 · created 2025-12-08
- tinashelorenzi/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-14
- trax69/cve-2025-55182-poc ↗Trust ok 100
Proof of Concept for CVE-2025-55182 ("React2Shell"). A fully dockerized environment demonstrating Remote Code Execution (RCE) via insecure deserialization in React Server Components. Includes vulnerable targets for both Vanilla React (Express) and Next.js, along with a custom Python exploit script.
★ 0 · created 2025-12-09
- Vladjrfhfg/React-site-CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2026-01-20
- vyvivekyadav04/RSC-Infra-Scanner ↗Trust ok 100
This is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I made it to find the applications possibly vulnerable to CVE-2025-55182 and CVE-2025-66478)
★ 0 · created 2025-12-06
- wangzhengquan/CVE-2025-55182 ↗Trust ok 100
https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3
★ 0 · created 2025-12-08
- wnaspy/CVE-2025-55182 ↗Trust ok 100
React2shell exploit (CVE-2025-55182+CVE-2025-66478)
★ 0 · created 2026-01-31
- Ya0h4cker/CVE-2025-55182 ↗Trust ok 100
Analysis, Validation Environment, and POC for CVE-225-55182 Vulnerability.
★ 0 · created 2025-12-13
- yannisduvignau/react2shell-exploit ↗Trust ok 100
CVE-2025-55182, also known as React2Shell, is a critical vulnerability affecting Next.js applications using React Server Components (RSC) and Server Actions.
★ 0 · created 2026-01-06
- yaupunal/CVE-2025-55182-scanner ↗Trust ok 100
CVE-2025-55182-scanner with 2 different method
★ 0 · created 2025-12-08
- younesZdDz/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-05
★ 0 · created 2025-12-09
- yuta3003/CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-12
- zessu/CVE-2025-55182-Typescript ↗Trust ok 100
Show case CVE-2025-55182 POC in Typrescript/Javascript
★ 0 · created 2025-12-05
- zorejt/Rust_CVE-2025-55182 ↗Trust ok 100
★ 0 · created 2025-12-06
- zxz3650/CVE-2025-55182-POC ↗Trust ok 100
CVE-2025-55182-POC
★ 0 · created 2025-12-07
Fake proof-of-concept repositories have been used to deliver malware to the researchers who run them. The trust verdict is our engine's heuristic over the repository (account age, what it ships, how its stars arrived); it is a reason to read the code first, not a finding about its author.
On the wire
0 dispatchesNo dispatch on our wire has named this CVE yet.
Watch this one?
KEV additions reach Telegram and the KEV-only RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.