What happened
Meta React Server Components contains a remote code execution vulnerability that could allow unauthenticated remote code execution by exploiting a flaw in how React decodes payloads sent to React Server Function endpoints. Please note CVE-2025-66478 has been rejected, but it is associated with CVE-2025- 55182.
Affected versions
React Server Components: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 52506React Server 19.2.0 - Remote Code Executiondanieljavanrad2026-04-09VerifiedPoC-in-GitHub · mayank729/CVE-2025-55182-scanner🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.★ 0mayank7292022-06-17CandidatePoC-in-GitHub · pitufo1721/CVE-2025-55182-GodzillaMemoryShell★ 0pitufo17212023-07-07CandidatePoC-in-GitHub · alyaapm/CVE-2025-55182-shellinteractive★ 0alyaapm2024-11-29CandidatePoC-in-GitHub · Mayca369/CVE-2025-55182🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.★ 0Mayca3692025-06-06CandidatePoC-in-GitHub · BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.jsScript to quick check CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Critical unauthenticated RCE vulnerabilities in the React Server Components (RSC) “Flight” protocol.★ 12BankkRoll2025-12-03CandidatePoC-in-GitHub · ejpir/CVE-2025-55182-researchCVE-2025-55182 POC★ 793ejpir2025-12-03CandidatePoC-in-GitHub · sickwell/CVE-2025-55182CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface★ 14sickwell2025-12-03CandidatePoC-in-GitHub · fatguru/CVE-2025-55182-scannerA non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications★ 111fatguru2025-12-03CandidatePoC-in-GitHub · atastycookie/CVE-2025-55182CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface★ 0atastycookie2025-12-03CandidatePoC-in-GitHub · santihabib/CVE-2025-55182-analysis★ 4santihabib2025-12-03CandidatePoC-in-GitHub · xkillbit/cve-2025-55182-scanner★ 4xkillbit2025-12-04CandidatePoC-in-GitHub · whiteov3rflow/CVE-2025-55182-pocReact2Shell Proof of Concept★ 94whiteov3rflow2025-12-04CandidatePoC-in-GitHub · shen771/Blackash-CVE-2025-55182CVE-2025-55182★ 0shen7712025-12-04CandidatePoC-in-GitHub · Pa2sw0rd/exploit-CVE-2025-55182-pocThis POC demonstrates CVE-2025-55182 using actual `react-server-dom-webpack@19.0.0` vulnerable code.★ 1Pa2sw0rd2025-12-04CandidatePoC-in-GitHub · heiheishushu/rsc_detect_CVE-2025-55182For CVE-2025-55182 and CVE-2025-66478 Security Response★ 8heiheishushu2025-12-04CandidatePoC-in-GitHub · songsanggggg/CVE-2025-55182CVE-2025-55182 漏洞利用GUI,PoC / Exploit for CVE-2025-55182 & CVE-2025-66478★ 1songsanggggg2025-12-04CandidatePoC-in-GitHub · M0onPu15e/next.js-scanner检测针对 CVE-2025-55182（React 服务器组件远程代码执行漏洞）的扫描器★ 3M0onPu15e2025-12-04CandidatePoC-in-GitHub · ducducuc111/CVE-2025-55182-poc★ 0ducducuc1112025-12-04CandidatePoC-in-GitHub · ThemeHackers/CVE-2025-55182a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test and understand the vulnerability.★ 22ThemeHackers2025-12-04CandidatePoC-in-GitHub · joshterrill/CVE-2025-55182-realistic-poca realistic POC demonstrating the missing `hasOwnProperty` check in react-server-dom-webpack@19.0.0★ 0joshterrill2025-12-04CandidatePoC-in-GitHub · mingyisecurity-lab/CVE-2025-55182-TOOLSA Comprehensive CVE-2025-55182 Detection and Security Assessment Tool★ 2mingyisecurity-lab2025-12-04CandidatePoC-in-GitHub · gensecaihq/react2shell-scannerSecurity scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.★ 58gensecaihq2025-12-04CandidatePoC-in-GitHub · sudo-Yangziran/CVE-2025-55182POC★ 2sudo-Yangziran2025-12-04CandidatePoC-in-GitHub · Rsatan/Next.js-Exploit-ToolNext.js-Exploit-Tool 图形化综合利用工具，基于 Go 开发，一款针对 CVE-2025-55182 的独立安全评估工具。★ 119Rsatan2025-12-04CandidatePoC-in-GitHub · assetnote/react2shell-scannerHigh Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)★ 2457assetnote2025-12-04CandidatePoC-in-GitHub · jf0x3a/CVE-2025-55182-exploitRCE Auto exploit for CVE-2025-55182★ 3jf0x3a2025-12-04CandidatePoC-in-GitHub · harness-security-labs/CVE-2025-55182-checkerReact/Next.js React4Shell RCE CVE-2025-55182 checker★ 1harness-security-labs2025-12-04CandidatePoC-in-GitHub · dissy123/cve-2025-55182★ 0dissy1232025-12-04CandidatePoC-in-GitHub · dwisiswant0/CVE-2025-55182Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.★ 59dwisiswant02025-12-04CandidatePoC-in-GitHub · Chelsea486MHz/CVE-2025-55182-testSee if your endpoint could be vulnerable.★ 0Chelsea486MHz2025-12-04CandidatePoC-in-GitHub · oways/React2shell-CVE-2025-55182-checker★ 2oways2025-12-04CandidatePoC-in-GitHub · msanft/CVE-2025-55182Explanation and full RCE PoC for CVE-2025-55182★ 1431msanft2025-12-04CandidatePoC-in-GitHub · ivaavimusic/React19-fix-vibecodersCVE-2025-55182 Fix for Vibe Coders★ 1ivaavimusic2025-12-04CandidatePoC-in-GitHub · carlosaruy/CVE-2025-55182a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test and understand the vulnerability.★ 0carlosaruy2025-12-04CandidatePoC-in-GitHub · Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478Scanner for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Track and remediate a critical React Server Components (RSC) / Flight protocol vulnerability campaign impacting react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack, and RSC-enabled frameworks like Next.js.★ 6Security-Phoenix-demo2025-12-04CandidatePoC-in-GitHub · c0rydoras/CVE-2025-55182some notes && (somewhat?) poc-adjacent stuff for CVE-2025-55182★ 4c0rydoras2025-12-04CandidatePoC-in-GitHub · CymulateResearch/React2Shell-ScannerReact2Shell Scanner (CVE-2025-55182 & CVE-2025-66478)★ 2CymulateResearch2025-12-04CandidatePoC-in-GitHub · 0xPThree/cve-2025-55182★ 00xPThree2025-12-04CandidatePoC-in-GitHub · acheong08/CVE-2025-55182-pocActual CVE-2025-55182 detection and exploit. No bullshit LLMs.★ 11acheong082025-12-04CandidatePoC-in-GitHub · jctommasi/react2shellVulnAppDeliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.★ 7jctommasi2025-12-04CandidatePoC-in-GitHub · shamo0/react2shell-PoCNuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)★ 10shamo02025-12-04CandidatePoC-in-GitHub · EynaExp/CVE-2025-55182-POCPoc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages)★ 6EynaExp2025-12-04CandidatePoC-in-GitHub · im-hanzou/CVE-2025-55182-POC-SCANNERUnified Security Research Tool★ 0im-hanzou2025-12-04CandidatePoC-in-GitHub · klassiker/CVE-2025-55182★ 0klassiker2025-12-04CandidatePoC-in-GitHub · Emiyelbarto/CVE-2025-55182-PoCPoc for CVE-2025-55182★ 1Emiyelbarto2025-12-04CandidatePoC-in-GitHub · MrR0b0t19/CVE-2025-55182-shellinteractive★ 21MrR0b0t192025-12-04CandidatePoC-in-GitHub · ps-interactive/cve-2025-55182Vulnerable REACT app in docker container and poc code - for demos★ 0ps-interactive2025-12-04CandidatePoC-in-GitHub · tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-ExtensionBurp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).★ 24tobiasGuta2025-12-04CandidatePoC-in-GitHub · aquinn-r7/CVE-2025-55182-VulnCheckPOCFunctional Python POC to test if servers are vulnerable to CVE-2025-55182★ 0aquinn-r72025-12-04CandidatePoC-in-GitHub · MedusaSH/POC-CVE-2025-55182PoC CVE-2025-55182★ 1MedusaSH2025-12-04CandidatePoC-in-GitHub · nxgn-kd01/react2shell-scannerDetect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.★ 3nxgn-kd012025-12-04CandidatePoC-in-GitHub · clevernyyyy/CVE-2025-55182-Dockerized★ 1clevernyyyy2025-12-04CandidatePoC-in-GitHub · Cillian-Collins/CVE-2025-55182A proof of concept exploit script for CVE-2025-55182★ 3Cillian-Collins2025-12-04CandidatePoC-in-GitHub · ZihxS/check-react-rce-cve-2025-55182Security scanner to detect CVE-2025-55182 & CVE-2025-66478 vulnerabilities in React Server Components (RSC) projects★ 6ZihxS2025-12-05CandidatePoC-in-GitHub · ZemarKhos/CVE-2025-55182-Exploit-PoC-Scanner★ 2ZemarKhos2025-12-05CandidatePoC-in-GitHub · sherlocksecurity/CVE-2025-55182-Exploit-scanner★ 0sherlocksecurity2025-12-05CandidatePoC-in-GitHub · huangzccn/CVE-2025-55182CVE-2025-55182★ 0huangzccn2025-12-05CandidatePoC-in-GitHub · Darker-Ink/react-ssr-vulnerabilityThis is a POC script for CVE-2025-55182 (React SSR RCE)★ 0Darker-Ink2025-12-05CandidatePoC-in-GitHub · emadshanab/POC-for-CVE-2025-55182POC for CVE-2025-55182★ 1emadshanab2025-12-05CandidatePoC-in-GitHub · topstar88/CVE-2025-55182★ 0topstar882025-12-05CandidatePoC-in-GitHub · selectarget/CVE-2025-55182-Exploit★ 0selectarget2025-12-05CandidatePoC-in-GitHub · pyroxenites/Nextjs_RCE_Exploit_ToolExploit for CVE-2025-55182 & CVE-2025-66478★ 142pyroxenites2025-12-05CandidatePoC-in-GitHub · Chocapikk/CVE-2025-55182Next.js React Server Components RCE exploit for CVE-2025-55182★ 68Chocapikk2025-12-05CandidatePoC-in-GitHub · mrknow001/RSC_DetectorSupports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.★ 592mrknow0012025-12-05CandidatePoC-in-GitHub · Spritualkb/CVE-2025-55182-expCVE-2025-55182 React Server Components Remote Code Execution Exploit Tool★ 47Spritualkb2025-12-05CandidatePoC-in-GitHub · younesZdDz/CVE-2025-55182★ 0younesZdDz2025-12-05CandidatePoC-in-GitHub · lachlan2k/React2Shell-CVE-2025-55182-original-pocOriginal Proof-of-Concepts for React2Shell CVE-2025-55182★ 1058lachlan2k2025-12-05CandidatePoC-in-GitHub · hualy13/CVE-2025-55182★ 4hualy132025-12-05CandidatePoC-in-GitHub · RuoJi6/CVE-2025-55182-RCE-shellBurp Suite/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC/BASE64)★ 31RuoJi62025-12-05CandidatePoC-in-GitHub · Saturate/CVE-2025-55182-react2shellA bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications. And a PoC nodejs script★ 1Saturate2025-12-05CandidatePoC-in-GitHub · hoosin/CVE-2025-55182★ 3hoosin2025-12-05CandidatePoC-in-GitHub · Pizz33/CVE-2025-55182-burpscanner基于 CVE-2025-55182 漏洞检测 burpsuite 被动扫描插件★ 10Pizz332025-12-05CandidatePoC-in-GitHub · Y3B3L4Y3/CVE-2025-55182-test★ 1Y3B3L4Y32025-12-05CandidatePoC-in-GitHub · ngvcanh/CVE-2025-55182-Attack-AnalysisReal-world attack analysis of CVE-2025-55182 (React2Shell) - React Server Components RCE vulnerability★ 0ngvcanh2025-12-05CandidatePoC-in-GitHub · aliclub0x00/CVE-2025-55182-POC-NEXTJSWorking proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]★ 27aliclub0x002025-12-05CandidatePoC-in-GitHub · logesh-GIT001/CVE-2025-55182"One crafted HTTP request can compromise your entire server." — React Security Team, Dec 2025★ 2logesh-GIT0012025-12-05CandidatePoC-in-GitHub · freeqaz/react2shellAn analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools, technical information, etc★ 68freeqaz2025-12-05CandidatePoC-in-GitHub · ABCFabian/React2Shell-CVE-2025-55182-Testing-EnvironmentA containerized testing environment for CVE-2025-55182, a critical (10.0 CVSS) Remote Code Execution vulnerability in React Server Components.★ 1ABCFabian2025-12-05CandidatePoC-in-GitHub · l4rm4nd/CVE-2025-55182Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation★ 86l4rm4nd2025-12-05CandidatePoC-in-GitHub · Airis101/CVE-2025-55182-analysis浅谈React Server Components RCE 漏洞分析★ 1Airis1012025-12-05CandidatePoC-in-GitHub · GelukCrab/React-Server-Components-RCEReact Server Components 远程代码执行漏洞(CVE-2025-55182)★ 10GelukCrab2025-12-05CandidatePoC-in-GitHub · Golden-Secure/CVE-2025-55182Interactive RCE Web Shell (CVE-2025-55182) BY Golden-Security★ 0Golden-Secure2025-12-05CandidatePoC-in-GitHub · grp-ops/react2shellLightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 / CVE-2025-66478).★ 4grp-ops2025-12-05CandidatePoC-in-GitHub · alexandre-briongos-wavestone/react-cve-2025-55182-lab★ 0alexandre-briongos-wavestone2025-12-05CandidatePoC-in-GitHub · Rat5ak/CVE-2025-55182-React2Shell-RCE-POCThis repository documents research into deserialization behavior within Next.js React Server Components (RSC) using the Flight protocol. It focuses on how malformed multipart bodies combined with Server Action request handling can lead to prototype traversal and execution primitives on certain builds.★ 2Rat5ak2025-12-05CandidatePoC-in-GitHub · imbas007/POC-CVE-2025-55182★ 1imbas0072025-12-05CandidatePoC-in-GitHub · RajChowdhury240/React2Shell-CVE-2025-55182React2Shell | CVE-2025-55182 - React Server Components RCE★ 0RajChowdhury2402025-12-05CandidatePoC-in-GitHub · nehkark/CVE-2025-55182PoC: CVE-2025-55182 (React) and CVE-2025-66478 (Next.js)★ 7nehkark2025-12-05CandidatePoC-in-GitHub · prestonhashworth/cve-2025-55182★ 0prestonhashworth2025-12-05CandidatePoC-in-GitHub · nomorebreach/POC-CVE-2025-55182POC for CVE-2025-55182 React2Shell★ 0nomorebreach2025-12-05CandidatePoC-in-GitHub · nerium-security/CVE-2025-55182Host-based detection rules for the RCE vulnerability in the React JavaScript framework.★ 0nerium-security2025-12-05CandidatePoC-in-GitHub · zzhorc/CVE-2025-55182CVE-2025-55182复现环境及RCE回显poc★ 8zzhorc2025-12-05CandidatePoC-in-GitHub · Atlantis02-sec/Vulnerability-assessmentnmap nse for detecting React2Shell (CVE-2025-55182)★ 1Atlantis02-sec2025-12-05CandidatePoC-in-GitHub · rl0x01/CVE-2025-55182_PoCProof-of-Concept RCE pour CVE‑2025‑55182 exploitant le protocole React Flight sur Next.js App Router.★ 1rl0x012025-12-05CandidatePoC-in-GitHub · subzer0x0/React2ShellReact2Shell (CVE-2025-55182) – An intentionally vulnerable Next.js application created for educational and research purposes.★ 1subzer0x02025-12-05CandidatePoC-in-GitHub · f0xyx/CVE-2025-55182-ScannerSecurity scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components★ 0f0xyx2025-12-05CandidatePoC-in-GitHub · Cr4at0r/Next.js-RCE-Scanner-BurpSuite-Extension-使用burp自动检测CVE-2025-55182 Next.js RCE 漏洞★ 28Cr4at0r2025-12-05CandidatePoC-in-GitHub · ceortiz33/CVE-2025-55182Proof of Concept for React2Shell vulnerability★ 1ceortiz332025-12-05CandidatePoC-in-GitHub · xkey8/react2shellPoC for React2Shell (CVE-2025-55182)★ 1xkey82025-12-05CandidatePoC-in-GitHub · zessu/CVE-2025-55182-TypescriptShow case CVE-2025-55182 POC in Typrescript/Javascript★ 0zessu2025-12-05CandidatePoC-in-GitHub · mxm0z/r2sA web-based vulnerability scanner for CVE-2025-55182, a critical Remote Code Execution (RCE) vulnerability in React Server Components.★ 0mxm0z2025-12-05CandidatePoC-in-GitHub · NathanJ60/react2shell-interactiveCVE-2025-55182 Interactive PoC - React Server Components RCE - Educational Security Research★ 0NathanJ602025-12-05CandidatePoC-in-GitHub · GarethMSheldon/React2Shell-CVE-2025-55182-Detector★ 1GarethMSheldon2025-12-05CandidatePoC-in-GitHub · kindone09/CVE-2025-55182★ 2kindone092025-12-05CandidatePoC-in-GitHub · alsaut1/react2shell-labCVE-2025-55182 React2Shell PoC lab★ 7alsaut12025-12-05CandidatePoC-in-GitHub · pax-k/react2shell-CVE-2025-55182-full-rce-scriptReact2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478)★ 6pax-k2025-12-05CandidatePoC-in-GitHub · kOaDT/poc-cve-2025-55182This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.★ 15kOaDT2025-12-05CandidatePoC-in-GitHub · mohit121312/CVE-2025-55182_full_exploitthis repo have CVE-2025-55182 full exploit with RCE★ 0mohit1213122025-12-05CandidatePoC-in-GitHub · ejpir/CVE-2025-55182-bypassHeader bypass for CVE-2025-55182 (React Server Components RCE).★ 6ejpir2025-12-05CandidatePoC-in-GitHub · StealthMoud/CVE-2025-55182-Scanner★ 8StealthMoud2025-12-05CandidatePoC-in-GitHub · yanoshercohen/React2Shell_CVE-2025-55182React2Shell (CVE-2025-55182) Exploit★ 4yanoshercohen2025-12-05CandidatePoC-in-GitHub · emredavut/CVE-2025-55182RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478★ 316emredavut2025-12-06CandidatePoC-in-GitHub · rapticore/ore_react2shell_scannerCVE-2025-55182 (React2Shell) Scanner★ 1rapticore2025-12-06CandidatePoC-in-GitHub · fankh/cve-2025-55182-test-lab-windows★ 0fankh2025-12-06CandidatePoC-in-GitHub · cypholab/evilactFast scanner for detecting and confirming Next.js RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).★ 2cypholab2025-12-06CandidatePoC-in-GitHub · greenheadHQ/CVE-2025-55182★ 1greenheadHQ2025-12-06CandidatePoC-in-GitHub · sumanrox/rschunterMass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478★ 37sumanrox2025-12-06CandidatePoC-in-GitHub · I3r1h0n/React2ShellMy research on CVE-2025-55182★ 0I3r1h0n2025-12-06CandidatePoC-in-GitHub · zorejt/Rust_CVE-2025-55182★ 0zorejt2025-12-06CandidatePoC-in-GitHub · Archerkong/CVE-2025-55182CVE-2025-55182 poc★ 1Archerkong2025-12-06CandidatePoC-in-GitHub · philparzer/nextjs-react2shell-detectchrome extension to detect next.js sites vulnerable to CVE-2025-55182 (react2shell)★ 2philparzer2025-12-06CandidatePoC-in-GitHub · yunaranyancat/CVE-2025-55182-NSEMeow★ 0yunaranyancat2025-12-06CandidatePoC-in-GitHub · MrSol0/CVE-2025-55182-TerminalThis is a POC for testing your projects that are vulnerable to CVE-2025-55182 with a terminal and ability to scan a list★ 0MrSol02025-12-06CandidatePoC-in-GitHub · fullhunt/react2shell-test-serverA test server for demonstrating and testing React2Shell (CVE-2025-55182) vulnerability★ 2fullhunt2025-12-06CandidatePoC-in-GitHub · zack0x01/vuln-app-CVE-2025-55182★ 22zack0x012025-12-06CandidatePoC-in-GitHub · zack0x01/CVE-2025-55182-advanced-scanner-★ 283zack0x012025-12-06CandidatePoC-in-GitHub · rocklambros/React2Shell_HunterAWS Organization-wide detection toolkit for CVE-2025-55182 & CVE-2025-66478 (React Server Components / Next.js RCE vulnerabilities)★ 1rocklambros2025-12-06CandidatePoC-in-GitHub · alessiodos/react2shell-scannerCVE-2025-55182 & CVE-2025-66478 Detection Tool for Next.js RSC RCE★ 1alessiodos2025-12-06CandidatePoC-in-GitHub · Bashamega/react-CVE-2025-55182-fixerPatches CVE-2025-55182 in your repositories★ 0Bashamega2025-12-06CandidatePoC-in-GitHub · orgito1015/CVE-2025-55182-RCE-ExploitMore exploit-focused; great for security research repos.★ 0orgito10152025-12-06CandidatePoC-in-GitHub · keklick1337/CVE-2025-55182-golang-PoCCVE-2025-55182 React Server Components RCE - Go PoC★ 6keklick13372025-12-06CandidatePoC-in-GitHub · rubensuxo-eh/react2shell-exploitReact2Shell-Exploit — Complete exploitation framework for CVE-2025-55182, including Python exploit, Docker vulnerable lab, Burp Suite manual and automated exploitation, Nuclei detection template, and validated testing workflow. Developed for penetration testing and educational research.★ 4rubensuxo-eh2025-12-06CandidatePoC-in-GitHub · CirqueiraDev/MassExploit-CVE-2025-55182CVE-2025-55182 RCE - Massive Scanner POC★ 5CirqueiraDev2025-12-06CandidatePoC-in-GitHub · aastikgakhar/CVE-2025-55182-react2shellDetects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.★ 0aastikgakhar2025-12-06CandidatePoC-in-GitHub · zamdevio/r2sAdvanced security testing tool for CVE-2025-55182 vulnerability assessment in Next.js applications. Features interactive shell, batch scanning, WAF bypass, and comprehensive reporting.★ 2zamdevio2025-12-06CandidatePoC-in-GitHub · AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-WebReact2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups.★ 8AdityaBhatt30102025-12-06CandidatePoC-in-GitHub · 0xN7y/CVE-2025-55182Poc for CVE-2025-55182★ 00xN7y2025-12-06CandidatePoC-in-GitHub · MuhammadWaseem29/React2Shell_Rce-cve-2025-55182React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0, including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack, contain a remote code execution vulnerability.★ 3MuhammadWaseem292025-12-06CandidatePoC-in-GitHub · l0n3m4n/CVE-2025-55182-WafCVE-2025-55182 RCE vulnerability in Next.js/React RSC servers (exploit and scanner)★ 2l0n3m4n2025-12-06CandidatePoC-in-GitHub · ynsmroztas/NextRceReact Shell & Next.js RSC Exploit Tool (CVE-2025-55182)★ 267ynsmroztas2025-12-06CandidatePoC-in-GitHub · shreyas-malhotra/React2Shell-CVE-2025-55182A minimal RCE PoC for CVE-2025-55182★ 0shreyas-malhotra2025-12-06CandidatePoC-in-GitHub · sohaibeb/CVE-2025-55182CVE-2025-55182 PoC Exploit★ 1sohaibeb2025-12-06CandidatePoC-in-GitHub · vyvivekyadav04/RSC-Infra-ScannerThis is a fast, asynchronous Python tool that fingerprints domains for likely Next.js App Router / React Server Components (RSC) infrastructure. (I made it to find the applications possibly vulnerable to CVE-2025-55182 and CVE-2025-66478)★ 0vyvivekyadav042025-12-06CandidatePoC-in-GitHub · MikeTheHash/CVE-2025-55182A modified and a little boosted exploit for CVE-2025-55182, React2Shell: Pre-authentication Remote Code Execution in React Server Packages★ 0MikeTheHash2025-12-06CandidatePoC-in-GitHub · Qixinlee/CVE-2025-55182-ScannerAutomated scanner for CVE-2025-55182: a critical RCE vulnerability in React Server Components and Next.js.★ 1Qixinlee2025-12-07CandidatePoC-in-GitHub · DelvyGonzalez/react2shell-security-toolkitSecurity toolkit to detect CVE-2025-55182 (React2Shell) vulnerability★ 1DelvyGonzalez2025-12-07CandidatePoC-in-GitHub · ahmedshamsddin/CVE-2025-55182★ 0ahmedshamsddin2025-12-07CandidatePoC-in-GitHub · LemonTeatw1/CVE-2025-55182-exploitThis is CVE-2025-55182 exploit★ 6LemonTeatw12025-12-07CandidatePoC-in-GitHub · ethicalrohitt/React2Shell_cve-2025-55182★ 0ethicalrohitt2025-12-07CandidatePoC-in-GitHub · ihhgimhana/React2Shell-CVE-2025-55182-PoC-Reverse-ShellThis is an easy to use PoC script to exploit React2Shell-CVE-2025-55182 Nextjs vulnerability. This will help to gain a reverse shell.★ 3ihhgimhana2025-12-07CandidatePoC-in-GitHub · shakilkhatri/scanner-for-CVE-2025-55182-vulnerabilityCVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean Markdown report.★ 0shakilkhatri2025-12-07CandidatePoC-in-GitHub · UmmItKin/CVE-2025-55182-PoCreact2shell PoC with Go / CVE-2025-55182★ 1UmmItKin2025-12-07CandidatePoC-in-GitHub · robbin0919/CVE-2025-55182★ 0robbin09192025-12-07CandidatePoC-in-GitHub · zxz3650/CVE-2025-55182-POCCVE-2025-55182-POC★ 0zxz36502025-12-07CandidatePoC-in-GitHub · AliHzSec/CVE-2025-55182Critical RCE vulnerability scanner for React Server Components (CVE-2025-55182). Automated exploitation framework with multi-payload support, proxy capabilities, and interactive command execution.★ 15AliHzSec2025-12-07CandidatePoC-in-GitHub · zr0n/react2shellA complete framework for exploiting the vulnerability CVE-2025-55182★ 11zr0n2025-12-07CandidatePoC-in-GitHub · hunter24x24/CVE-2025-55182-mass★ 0hunter24x242025-12-07CandidatePoC-in-GitHub · andressuarezmonk/CVE-2025-55182★ 0andressuarezmonk2025-12-07CandidatePoC-in-GitHub · cybertechajju/R2C-CVE-2025-55182-66478🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478★ 24cybertechajju2025-12-07CandidatePoC-in-GitHub · Dh4v4l8/CVE-2025-55182-poc-tool★ 3Dh4v4l82025-12-07CandidatePoC-in-GitHub · M4xSec/CVE-2025-55182-React2Shell-RCE-ShellCVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only.★ 9M4xSec2025-12-07CandidatePoC-in-GitHub · SainiONHacks/CVE-2025-55182-ScannerA standalone GUI tool to detect and demonstrate the **React Server Components Remote Code Execution (RCE)** vulnerability (CVE-2025-55182) in Next.js applications.★ 2SainiONHacks2025-12-07CandidatePoC-in-GitHub · umairahmadh/react-vuln-scannerA bash script to scan your server for React applications vulnerable to **CVE-2025-55182** — a critical remote code execution vulnerability (CVSS 10.0) in React Server Components.★ 1umairahmadh2025-12-07CandidatePoC-in-GitHub · ToritoIO/Torito-R2STorito React2Shell Scanner & Exploit Tool (CVE-2025-55182 / 66478)★ 4ToritoIO2025-12-07CandidatePoC-in-GitHub · surajhacx/react2shellpocreact2shell CVE-2025-55182 PoC★ 32surajhacx2025-12-07CandidatePoC-in-GitHub · kavienanj/CVE-2025-55182Step-by-step walkthrough of CVE-2025-55182 (React2Shell) by tracing React's Flight protocol internals.★ 38kavienanj2025-12-07CandidatePoC-in-GitHub · websecuritylabs/React2Shell-LibraryA curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as "React2Shell".★ 7websecuritylabs2025-12-07CandidatePoC-in-GitHub · cyberleelawat/CVE-2025-55182A critical Remote Code Execution (RCE) vulnerability affecting the React Server Components (RSC) implementation within multiple packages including.★ 1cyberleelawat2025-12-07CandidatePoC-in-GitHub · satriarizka/CVE-2025-55182-Simple-ScannerHigh-fidelity RCE scanner for CVE-2025-55182 affecting Next.js RSC. Supports mass scanning, command execution, and automated recon pipelines. Built for pentesters, researchers, and bounty hunters.★ 0satriarizka2025-12-07CandidatePoC-in-GitHub · xcanwin/CVE-2025-55182-React-RCE[漏洞复现] 全球首款基于RSC特性能绕过WAF检测的CVE-2025-55182 React Server RCE 漏洞 EXP。★ 15xcanwin2025-12-07CandidatePoC-in-GitHub · DoobTheGoober/CVE-2025-55182-Test-ServerPlay with react2shell in a safe environment!★ 0DoobTheGoober2025-12-07CandidatePoC-in-GitHub · timsonner/React2Shell-CVE-2025-55182POC and lab setup★ 3timsonner2025-12-08CandidatePoC-in-GitHub · theman001/CVE-2025-55182CVE-2025-55182 React RCE Test Program★ 2theman0012025-12-08CandidatePoC-in-GitHub · lalaterry/CVE-2025-55182-React2Shell-lab★ 0lalaterry2025-12-08CandidatePoC-in-GitHub · arashiyans/CVE-2025-55182-CVE-2025-66478scanner testing★ 1arashiyans2025-12-08CandidatePoC-in-GitHub · faizdotid/rust-cve-2025-55182★ 0faizdotid2025-12-08CandidatePoC-in-GitHub · muthaiyanmani/react2shell-checkerA security vulnerability scanner for detecting the React2Shell vulnerability (CVE-2025-55182) in Next.js and React applications.★ 0muthaiyanmani2025-12-08CandidatePoC-in-GitHub · LucasPDiniz/CVE-2025-55182React2Shell Vulnerability★ 2LucasPDiniz2025-12-08CandidatePoC-in-GitHub · wangzhengquan/CVE-2025-55182https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3★ 0wangzhengquan2025-12-08CandidatePoC-in-GitHub · TH-SecForge/CVE-2025-55182★ 0TH-SecForge2025-12-08CandidatePoC-in-GitHub · chitoz1300/React2Shell-CVE-2025-55182* React2Shell-CVE-2025-55182★ 0chitoz13002025-12-08CandidatePoC-in-GitHub · Night-have-dreams/CVE-2025-55182-PoCCVE-2025-55182 PoC★ 1Night-have-dreams2025-12-08CandidatePoC-in-GitHub · thekamran/CVE-2025-55182-Proof-of-Concept★ 0thekamran2025-12-08CandidatePoC-in-GitHub · Syrins/CVE-2025-55182-React2Shell-RCEA modern, user-friendly GUI application for detecting and exploiting the CVE-2025-55182 vulnerability in React Server Components. Built with Python and Tkinter, featuring a sleek neon-themed interface for scanning targets, executing shell commands, and viewing live console output.★ 3Syrins2025-12-08CandidatePoC-in-GitHub · 0xsj/CVE-2025-55182★ 10xsj2025-12-08CandidatePoC-in-GitHub · Security-Phoenix-demo/react2shell-scanner-CVE-2025-55182React2shell-web-scanner★ 2Security-Phoenix-demo2025-12-08CandidatePoC-in-GitHub · Benrich127N/react2shell_analyzera dart package to analyze CVE-2025-55182 react2shell★ 1Benrich127N2025-12-08CandidatePoC-in-GitHub · randarts/react-rceCVE-2025-55182 취약점에 대한 샘플을 AI와 함께 작성 및 테스트 했습니다.★ 0randarts2025-12-08CandidatePoC-in-GitHub · hamm0nz/react2shell-auditA lightweight, recursive Bash script to detect Next.js and React Server DOM versions vulnerable to CVE-2025-55182 (React2Shell) in local projects.★ 1hamm0nz2025-12-08CandidatePoC-in-GitHub · 0xSalm0n/CVE-2025-55182★ 10xSalm0n2025-12-08CandidatePoC-in-GitHub · Macaroniwdcheese/CVE-2025-55182-Lab★ 0Macaroniwdcheese2025-12-08CandidatePoC-in-GitHub · LvMalware/CVE-2025-55182Exploit for CVE-2025-55182 (React4Shell)★ 0LvMalware2025-12-08CandidatePoC-in-GitHub · HUAHUAI23/CVE-2025-55182-POC★ 1HUAHUAI232025-12-08CandidatePoC-in-GitHub · cahyod/react2shellAlat ini mendeteksi potensi kerentanan React2Shell (CVE-2025-55182) dalam proyek React dengan memeriksa: - File `package.json` dan file lock untuk paket rentan - Direktori `node_modules` untuk dependensi yang terpengaruh - URL secara pasif untuk deteksi jarak jauh★ 1cahyod2025-12-08CandidatePoC-in-GitHub · yaupunal/CVE-2025-55182-scannerCVE-2025-55182-scanner with 2 different method★ 0yaupunal2025-12-08CandidatePoC-in-GitHub · jandelima/cve-2025-55182-poc-test★ 0jandelima2025-12-08CandidatePoC-in-GitHub · im-ezboy/CVE-2025-55182-zoomeye🔍 Next.js RCE Scanner (CVE-2025-55182) - Automated vulnerability scanner using Zoomeye search engine. Discovers targets via dorks and tests for CVE-2025-55182 with parallel scanning capabilities.★ 8im-ezboy2025-12-08CandidatePoC-in-GitHub · FurkanKAYAPINAR/React-Next-ScannerCVE-2025-55182 and CVE-2025-66478★ 0FurkanKAYAPINAR2025-12-08CandidatePoC-in-GitHub · lowercasenumbers/CVE-2025-55182CVE-2025-55182 React2Shell PoC★ 0lowercasenumbers2025-12-08CandidatePoC-in-GitHub · AggressiveUser/React2Hell[React2Hell] Next.js/React Server RCE Exploit — CVE-2025-55182★ 3AggressiveUser2025-12-08CandidatePoC-in-GitHub · racall/cve-2025-55182-nodeCVE-2025-55182 Next.js RCE Exploit Tool★ 1racall2025-12-08CandidatePoC-in-GitHub · FurkanKAYAPINAR/ReactNext2ShellCVE-2025-55182 and CVE-2025-66478★ 1FurkanKAYAPINAR2025-12-08CandidatePoC-in-GitHub · LQTjim/next-bug-CVE-2025-55182★ 0LQTjim2025-12-08CandidatePoC-in-GitHub · AliAbdollahiii/react2shell_detectorHeuristic security scanner for detecting React Server Components (RSC) vulnerabilities, including React2Shell-style behavior (CVE-2025-55182). Safe, non-exploitative, multi-target capable.★ 0AliAbdollahiii2025-12-08CandidatePoC-in-GitHub · jan0x190/CVE-2025-55182-Simple-Scanner-main★ 1jan0x1902025-12-08CandidatePoC-in-GitHub · xiaopeng-ye/react2shell-detectorA Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications★ 5xiaopeng-ye2025-12-08CandidatePoC-in-GitHub · vulncheck-oss/cve-2025-55182VulnCheck CVE-2025-55182 react2shell★ 2vulncheck-oss2025-12-08CandidatePoC-in-GitHub · Shield-Cyber/react2shell-scannerScanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.★ 1Shield-Cyber2025-12-08CandidatePoC-in-GitHub · sun977/CVE-2025-55182CVE-2025-55182 检测方式和攻击利用★ 1sun9772025-12-09CandidatePoC-in-GitHub · garux-sec/PoC-react2shell-CVE-2025-55182PoC-react2shell-CVE-2025-55182★ 0garux-sec2025-12-09CandidatePoC-in-GitHub · ancs21/react2shell-scanner-rustDetect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications (Rust)★ 1ancs212025-12-09CandidatePoC-in-GitHub · MoisesTapia/http-react2shellDetection of the React Server Actions Exploit vector – CVE-2025-55182 / CVE-2025-66478★ 0MoisesTapia2025-12-09CandidatePoC-in-GitHub · solidevil14/Suricata-Rule-for-Detecting-CVE-2025-55182CVE‑2025‑55182 Detection★ 0solidevil142025-12-09CandidatePoC-in-GitHub · techgaun/cve-2025-55182-scanner★ 3techgaun2025-12-09CandidatePoC-in-GitHub · rsch-io/CVE-2025-55182-React2ShellReact2Shell (CVE-2025-55182) proof-of-concept (PoC) exploit demonstrating a CRITICAL remote code execution (RCE) vulnerability in modern web frameworks using React Server Components (RSC).★ 1rsch-io2025-12-09CandidatePoC-in-GitHub · ilixm/PoC-RCE-CVE-2025-55182★ 0ilixm2025-12-09CandidatePoC-in-GitHub · iamblacksolo2-BugBounty/POC-CVE-2025-55182★ 0iamblacksolo2-BugBounty2025-12-09CandidatePoC-in-GitHub · joelvaiju/react2shell-CVE-2025-55182-poca simple react2shell poc with basic waf bypass★ 3joelvaiju2025-12-09CandidatePoC-in-GitHub · DevVaibhav07/POC-CVE-2025-55182POC-CVE-2025-55182★ 0DevVaibhav072025-12-09CandidatePoC-in-GitHub · liamromanis101/cve-2025-55182Python3 script that can be used to demonstrate **CVE-2025-55182**. It exploits a server-side JavaScript injection vulnerability in Next.js/React applications, allowing **remote code execution** via malformed multipart form data.★ 0liamromanis1012025-12-09CandidatePoC-in-GitHub · ysfcndgr/React2Shell-CVE-2025-55182-Advanced-Scanner★ 0ysfcndgr2025-12-09CandidatePoC-in-GitHub · alfazhossain/CVE-2025-55182-ExploiterCVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve★ 4alfazhossain2025-12-09CandidatePoC-in-GitHub · keshavyaduvans/cve-2025-55182★ 1keshavyaduvans2025-12-09CandidatePoC-in-GitHub · byte16384/CVE-2025-55182proof★ 0byte163842025-12-09CandidatePoC-in-GitHub · kondukto-io/vulnerable-next-js-pocPOC for React2Shell (CVE-2025-55182)★ 5kondukto-io2025-12-09CandidatePoC-in-GitHub · eytannatye/R2S_CVE-2025-55182★ 0eytannatye2025-12-09CandidatePoC-in-GitHub · Jaycelation/CVE-2025-55182PoC, Hunting React2Shell about CVE-2025-55182★ 0Jaycelation2025-12-09CandidatePoC-in-GitHub · shyambhanushali/React2ShellReact2Shell is a Python-based proof-of-concept tool designed to exploit CVE-2025-55182 and CVE-2025-66478, both impacting Next.js applications using React Server Components (RSC).★ 13shyambhanushali2025-12-09CandidatePoC-in-GitHub · amir-malek/react-cve-2025-55182★ 0amir-malek2025-12-09CandidatePoC-in-GitHub · Yyax13/CVE-2025-55182RCE exploitation tool targeting CVE-2025-55182, a critical vulnerability in React Server Components (RSC) affecting React 19.0.0 - 19.2.0 and Next.js applications.★ 1Yyax132025-12-09CandidatePoC-in-GitHub · Ankitspandey07/React2ShellCVE-2025-55182-advanced-scanner★ 0Ankitspandey072025-12-09CandidatePoC-in-GitHub · Stonelinks/react-cve-2025-55182malware I found on my server★ 0Stonelinks2025-12-09CandidatePoC-in-GitHub · ihsansencan/React2Shell-CVE-2025-55182* React2Shell-CVE-2025-55182★ 1ihsansencan2025-12-09CandidatePoC-in-GitHub · dr4xp/react2shellA critical vulnerability in React Server Components affecting React 19 (CVE-2025-55182) and frameworks that use it like Next.js (CVE-2025-66478).★ 2dr4xp2025-12-09CandidatePoC-in-GitHub · trax69/cve-2025-55182-pocProof of Concept for CVE-2025-55182 ("React2Shell"). A fully dockerized environment demonstrating Remote Code Execution (RCE) via insecure deserialization in React Server Components. Includes vulnerable targets for both Vanilla React (Express) and Next.js, along with a custom Python exploit script.★ 0trax692025-12-09CandidatePoC-in-GitHub · osman-butt/CVE-2025-55182-demoDemo of CVE-2025-55182 — Next.js RCE (for educational purposes)★ 0osman-butt2025-12-09CandidatePoC-in-GitHub · theori-io/reactguardReactGuard provides framework- and vulnerability-detection tooling for CVE-2025-55182 (React2Shell)★ 18theori-io2025-12-10CandidatePoC-in-GitHub · iamblacksolo2-BugBounty/POC2-CVE-2025-55182★ 0iamblacksolo2-BugBounty2025-12-10CandidatePoC-in-GitHub · bakhod1r/CVE-2025-55182★ 0bakhod1r2025-12-10CandidatePoC-in-GitHub · theman001/CVE-2025-55182_PoC-Test-ServerCVE-2025-55182 React RCE Test Server★ 1theman0012025-12-10CandidatePoC-in-GitHub · gunyakit/CVE-2025-55182-PoC-exploitNext.js RCE via React Server Functions★ 0gunyakit2025-12-10CandidatePoC-in-GitHub · rix4uni/CVE-2025-55182A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.★ 6rix4uni2025-12-10CandidatePoC-in-GitHub · gonaumov/cve-2025-55182-checkerA portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by [CVE-2025-55182]★ 0gonaumov2025-12-10CandidatePoC-in-GitHub · BeichenDream/CVE-2025-55182-GodzillaMemoryShell★ 108BeichenDream2025-12-10CandidatePoC-in-GitHub · Legus-Yeung/CVE-2025-55182-exploit★ 0Legus-Yeung2025-12-10CandidatePoC-in-GitHub · DanielXavierJob/-CVE-2025-55182★ 0DanielXavierJob2025-12-10CandidatePoC-in-GitHub · sponte/nextjs-cve-version-confusionReproduction for Next.js CVE-2025-55182 version string confusion issue★ 0sponte2025-12-10CandidatePoC-in-GitHub · CrazyloveforWeb/Golang-CVE-2025-55182-POC★ 0CrazyloveforWeb2025-12-10CandidatePoC-in-GitHub · JahazielLem/NSE_CVE-2025-55182Nmap NSE script for scanning React2Shell (CVE-2025-55182)★ 1JahazielLem2025-12-10CandidatePoC-in-GitHub · CerberusMrXi/Cerberus-React2Shell-Scanner-ExploitElite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation, Shodan/Censys mass scan, auto-pwn + reverse shells, Nuclei templates, K8s lab & C2 dashboard. Authored by Sudeepa Wanigarathna – strictly for authorized red team and penetration testing.★ 2CerberusMrXi2025-12-10CandidatePoC-in-GitHub · VeilVulp/RscScan-cve-2025-55182RscScan: Professional cross-platform vulnerability scanner for Next.js Server Actions (CVE-2025-55182). Detects critical RCE flaws with multi-threaded scanning, real-time analytics, and multi-language support. Built with Electron & React.★ 3VeilVulp2025-12-10CandidatePoC-in-GitHub · yz9yt/React2Shell-CTFA CTF challenge based on CVE-2025-55182 Vulnerability★ 3yz9yt2025-12-10CandidatePoC-in-GitHub · Gymnott1/CVE-2025-55182★ 1Gymnott12025-12-10CandidatePoC-in-GitHub · J4ck3LSyN-Gen2/CVE-2025-55182A simple toolkit to validate, exploit & gain an interactive shell via the react2Shell Next.js RCE.★ 0J4ck3LSyN-Gen22025-12-10CandidatePoC-in-GitHub · pkrasulia/CVE-2025-55182-NextJS-RCE-PoCWorking Proof of Concept (PoC) for CVE-2025-55182 (React2Shell) - Unauthenticated Remote Code Execution in Next.js 15.0.0 via React Server Components★ 4pkrasulia2025-12-10CandidatePoC-in-GitHub · min8282/CVE-2025-55182★ 0min82822025-12-11CandidatePoC-in-GitHub · Machine-farmer/PunchingBag-for-React2ShellIntentionally vulnerable Next.js app for CVE-2025-55182 security research and CTF challenges★ 1Machine-farmer2025-12-11CandidatePoC-in-GitHub · exrienz/CVE-2025-55182-NextJS-Scanner-React2Shell-PoC★ 0exrienz2025-12-11CandidatePoC-in-GitHub · mrmtwoj/React2Shell-CVE-2025-55182Educational / research tool related to React / Next.js vulnerability CVE‑2025‑55182 (“React2Shell”).★ 1mrmtwoj2025-12-11CandidatePoC-in-GitHub · LC-pro/CVE-2025-55182-EXP★ 2LC-pro2025-12-11CandidatePoC-in-GitHub · Tiger-Foxx/exploit-react-CVE-2025-55182This tool is a Proof of Concept (PoC) intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author (Tiger-Foxx) assumes no responsibility for misuse.★ 5Tiger-Foxx2025-12-11CandidatePoC-in-GitHub · VolksRat71/react2shellexploitvisualizedInteractive visualization of the React2Shell (CVE-2025-55182) RCE vulnerability with narrated animations for three audiences: Expert, Practitioner, and Stakeholder. Audio synced via ElevenLabs + Whisper.★ 3VolksRat712025-12-11CandidatePoC-in-GitHub · anuththara2007-W/CVE-2025-55182-Exploit-extensionA Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications★ 3anuththara2007-W2025-12-11CandidatePoC-in-GitHub · Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182★ 2Nkwenti-Severian-Ndongtsop2025-12-11CandidatePoC-in-GitHub · aseemyash/krleCVE-2025-55182 & CVE-2025-66478 proof of concepts★ 0aseemyash2025-12-11CandidatePoC-in-GitHub · 4nuxd/React2ShellR2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It provides an interactive shell with advanced features for penetration testing, including file transfer, persistence, enumeration, privilege escalation checks, and more.★ 04nuxd2025-12-11CandidatePoC-in-GitHub · j0lt-github/react2shell-burpBurp Suite extension for identifying the React Server Components unsafe deserialization vulnerability (React2Shell / CVE-2025-55182). It provides a focused UI tab, context-menu actions, active-scanner integration, and optional Burp Collaborator confirmation.★ 1j0lt-github2025-12-11CandidatePoC-in-GitHub · IrsyadSEC/CVE-2025-55182-MassPayloadAttackCVE-2025-55182 payload★ 1IrsyadSEC2025-12-12CandidatePoC-in-GitHub · Shadowroot97/React2Shell-CVE-2025-55182POC React2Shell-CVE-2025-55182★ 0Shadowroot972025-12-12CandidatePoC-in-GitHub · yuta3003/CVE-2025-55182★ 0yuta30032025-12-12CandidatePoC-in-GitHub · rahul-securify/React2Shell-CVE-2025-55182★ 0rahul-securify2025-12-12CandidatePoC-in-GitHub · raivenLockdown/WEB-CLI_RCE_React2ShellWEB-CLI_RCE_React2Shell is an educational PoC exploit tool for CVE-2025-55182, a critical Prototype Pollution flaw in Next.js applications using React Server Components. Designed for CTFs and research, it features a single-command mode, an interactive web CLI, and reverse shell capabilities to demonstrate RCE.★ 6raivenLockdown2025-12-12CandidatePoC-in-GitHub · oguri-souhei/CVE-2025-55182CVE-2025-55182 の検証用★ 0oguri-souhei2025-12-12CandidatePoC-in-GitHub · xalgord/React2ShellAdvanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)★ 53xalgord2025-12-12CandidatePoC-in-GitHub · ryanhafid/PoC_CVE-2025-55182★ 0ryanhafid2025-12-12CandidatePoC-in-GitHub · ryanhafid/Scan_CVE-2025-55182★ 0ryanhafid2025-12-12CandidatePoC-in-GitHub · gagaltotal/tot-react-rce-CVE-2025-55182CVE-2025-55182 – CVE-2025-66478 – React2Shell★ 1gagaltotal2025-12-12CandidatePoC-in-GitHub · sho-luv/React2ShellCVE-2025-55182 security test kit: CLI scanner + Chrome extension + Nuclei templates + Docker lab.★ 10sho-luv2025-12-12CandidatePoC-in-GitHub · h0tak88r/next88High-performance Go implementation for detecting React Server Components RCE vulnerabilities (CVE-2025-55182 & CVE-2025-66478).★ 0h0tak88r2025-12-13CandidatePoC-in-GitHub · TheStingR/ReactOOPS-WriteUpHack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182/CVE-2025-66478 (React2Shell RCE). Includes detailed vulnerability analysis, exploitation techniques, and team learning materials.★ 7TheStingR2025-12-13CandidatePoC-in-GitHub · mantvmass/react2shellA CLI tool that exploits vulnerabilities in React Server Components and Server Actions (CVE-2025-55182, CVE-2025-66478) to achieve remote code execution (RCE) on vulnerable servers.★ 2mantvmass2025-12-13CandidatePoC-in-GitHub · MoLeft/React2Shell-ToolboxA CVE-2025-55182(React2Shell) Toolbox Application★ 37MoLeft2025-12-13CandidatePoC-in-GitHub · Ya0h4cker/CVE-2025-55182Analysis, Validation Environment, and POC for CVE-225-55182 Vulnerability.★ 0Ya0h4cker2025-12-13CandidatePoC-in-GitHub · Kugelbyte/React2Shell-AnalysisA research report on CVE-2025-55182 (React2Shell).★ 0Kugelbyte2025-12-13CandidatePoC-in-GitHub · dhananjayakumarn/CVE-2025-55182-LabA hands-on lab for understanding and exploiting CVE-2025-55182 (React2Shell) - Remote Code Execution in React Server Components★ 0dhananjayakumarn2025-12-13CandidatePoC-in-GitHub · sangleshubham/React-Security-CVE-2025-55182-ExploitNodeJS-based exploit script and scanner for the React Server Components "React2Shell" vulnerability (CVE-2025-55182).★ 2sangleshubham2025-12-13CandidatePoC-in-GitHub · TrixSec/CVE-2025-55182-ScannerA hybrid security scanner for detecting CVE-2025-55182 in Next.js and Waku applications. Features combined static code analysis and safe dynamic verification for DevSecOps workflows.★ 3TrixSec2025-12-13CandidatePoC-in-GitHub · mounta11n/CHECK-CVE-2025-55182-AND-CVE-2025-66478Check if your server is affected by CVE-2025-55182 & CVE-2025-66478★ 1mounta11n2025-12-13CandidatePoC-in-GitHub · grejh0t/CVE-2025-55182★ 0grejh0t2025-12-13CandidatePoC-in-GitHub · hidden-investigations/react2shell-vulnlabA modern Next.js vulnerable web app themed as a news / blog portal for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.★ 3hidden-investigations2025-12-13CandidatePoC-in-GitHub · MammaniNelsonD/React2P4IM0Nshell💥Extension Tool para Auditoría y Explotación avanzada RCE/Source Leak/Dos (CVE-2025-55182/83/84) para entornos Next.js y React Server Components (RSC) directamente desde tu navegador + Laboratorio Vulnerable❌★ 3MammaniNelsonD2025-12-14CandidatePoC-in-GitHub · tinashelorenzi/CVE-2025-55182★ 0tinashelorenzi2025-12-14CandidatePoC-in-GitHub · ProwlSec/React2ShellAn advanced command-line framework for discovery, validation, and exploitation of CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications using React Server Components (RSC).★ 1ProwlSec2025-12-14CandidatePoC-in-GitHub · VVVI5HNU/CVE-2025-55182Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components.★ 1VVVI5HNU2025-12-14CandidatePoC-in-GitHub · CyberPrince-hub/React2shell-ultimate-scannerCVE-2025-55182-Advanced-Scanner is an automated security tool designed to detect and validate the CVE-2025-55182 vulnerability efficiently. it helps security researchers and bug bounty hunters quickly identify affected targets with accurate results and minimal false positives.★ 0CyberPrince-hub2025-12-14CandidatePoC-in-GitHub · hidden-investigations/react2shell-scannerPrecision-Based Detection of RSC/Next.js Remote Code Execution Vulnerabilities (CVE-2025-55182, CVE-2025-66478)★ 5hidden-investigations2025-12-14CandidatePoC-in-GitHub · mivmi/CVE-2025-55182★ 1mivmi2025-12-15CandidatePoC-in-GitHub · subhdotsol/CVE-2025-55182This project provides a fully functional demonstration of CVE-2025-55182 (React2Shell) - a critical Remote Code Execution vulnerability in React Server Components and Next.js.★ 2subhdotsol2025-12-15CandidatePoC-in-GitHub · Call123X/-cve-2025-55182cve-2025-55182★ 0Call123X2025-12-15CandidatePoC-in-GitHub · hulh122/CVE-2025-55182★ 0hulh1222025-12-15CandidatePoC-in-GitHub · simantchaudhari/CVE-2025-55182★ 0simantchaudhari2025-12-15CandidatePoC-in-GitHub · premdanav/react2shelldemoThis repo contains the scripts you can execute to simulate the (CVE-2025-55182) along with next.js server★ 0premdanav2025-12-15CandidatePoC-in-GitHub · S-Mughal/NextJS-app-CVE-2025-55182★ 0S-Mughal2025-12-16CandidatePoC-in-GitHub · itumo-arigatone/study-CVE-2025-55182試してみるよん★ 0itumo-arigatone2025-12-16CandidatePoC-in-GitHub · EQSTLab/CVE-2025-55182React2Shell★ 1EQSTLab2025-12-16CandidatePoC-in-GitHub · scumfrog/FiberBreakReact2Shell Exploitation Tool (CVE-2025-55182)★ 0scumfrog2025-12-16CandidatePoC-in-GitHub · d0cnull/nextjs-CVE-2025-55182★ 0d0cnull2025-12-16CandidatePoC-in-GitHub · Mustafa1p/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478An advanced vulnerability scanner for detecting **CVE-2025-55182** and **CVE-2025-66478** - critical Remote Code Execution (RCE) vulnerabilities in Next.js applications using React Server Components (RSC).★ 0Mustafa1p2025-12-16CandidatePoC-in-GitHub · M4rgs/CVE-2025-55182-React2Shell-ExploitA proof-of-concept tool for demonstrating the critical React2Shell vulnerability★ 1M4rgs2025-12-16CandidatePoC-in-GitHub · nulltrace1336/CVE-2025-55182-Metasploit-exploit-skeleton-real-flow-Quyida to‘liq LAB rejasi: demo-vulnerable app → Python PoC → Metasploit exploit skeleton★ 0nulltrace13362025-12-16CandidatePoC-in-GitHub · pwnxpl0it/react2shell-labReact2shell vulnerable lab (CVE-2025-55182)★ 0pwnxpl0it2025-12-17CandidatePoC-in-GitHub · ceh-aditya-raj/CVE-2025-55182Proof-of-concept research tool for CVE-2025-55182, a critical unauthenticated RCE in Next.js App Router caused by server-side object injection in React Server Components and Server Actions, including UTF-16LE WAF evasion techniques.★ 2ceh-aditya-raj2025-12-17CandidatePoC-in-GitHub · r4j3sh-com/CVE-2025-55182Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.★ 0r4j3sh-com2025-12-18CandidatePoC-in-GitHub · degenwithheart/React2Shell-Vulnerability-Verification-ScriptReact2Shell Vulnerability Verification Script (React2Shell also known as CVE-2025-55182).★ 0degenwithheart2025-12-18CandidatePoC-in-GitHub · rashedhasan090/cve-2025-55182-mitigator★ 0rashedhasan0902025-12-18CandidatePoC-in-GitHub · RavinduRathnayaka/CVE-2025-55182-PoCReact2Shell (CVE-2025-66478): A Python-based Proof of Concept for Critical Remote Code Execution (RCE) in Next.js Server Components. Features an interactive CLI, custom payload injection, and cleaner output formatting. For educational research only.★ 4RavinduRathnayaka2025-12-18CandidatePoC-in-GitHub · open-flaw/CVE-2025-55182★ 0open-flaw2025-12-19CandidatePoC-in-GitHub · chrahman/react2shell-CVE-2025-55182-full-rce-scriptReact2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478) Full Script★ 3chrahman2025-12-19CandidatePoC-in-GitHub · lamaper/CVE-2025-55182-Toolbox★ 1lamaper2025-12-19CandidatePoC-in-GitHub · mahaveer-choudhary/CVE-2025-55182A Python-based security scanner for detecting and exploiting **React Server Components (RSC)** vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing.★ 0mahaveer-choudhary2025-12-19CandidatePoC-in-GitHub · MeGaNeKoS/secure-by-default-rce-demoSecure-by-default demo lab showing how container hardening (distroless images, non-root, read-only filesystem, runtime-injected secrets) can neutralize a critical Next.js/React Server Actions RCE (CVE-2025-55182 “React2Shell”), with side-by-side safe vs unsafe deployments and exploit logs★ 0MeGaNeKoS2025-12-20CandidatePoC-in-GitHub · tamagorengs/react2shell-poc-CVE-2025-55182★ 0tamagorengs2025-12-20CandidatePoC-in-GitHub · xxxTectationxxx/React2Shell-CVE-LabA self-hosted vulnerable Next.js environment running on Docker for simulating CVE-2025-55182. Built for educational security research and CTF practice.★ 1xxxTectationxxx2025-12-20CandidatePoC-in-GitHub · vijay-shirhatti/RSC-Detect-CVE-2025-55182RSC Detect CVE 2025 55182★ 21vijay-shirhatti2025-12-20CandidatePoC-in-GitHub · p3ta00/react2shell-pocCVE-2025-55182 React2Shell PoC - Critical RCE in React Server Components / Next.js. CVSS 10.0. Error-based exfil, reverse shell, interactive mode.★ 9p3ta002025-12-20CandidatePoC-in-GitHub · vonuyvicoo/nextploiterNextJS exploiter for CVE-2025-55182 and more.★ 1vonuyvicoo2025-12-21CandidatePoC-in-GitHub · niokagi/react-cve-2025-55182Test & Analyze the CVE-2025-55182 vulnerability within Next.js Server Actions★ 0niokagi2025-12-21CandidatePoC-in-GitHub · knightwolf01/React2ShellReact2Shell Critical Vulnerability (CVE-2025-55182)★ 0knightwolf012025-12-22CandidatePoC-in-GitHub · BlackTechX011/React2ShellReact2Shell: An exploitation framework for CVE-2025-55182 (Next.js/React RCE).★ 12BlackTechX0112025-12-22CandidatePoC-in-GitHub · S3cr3t-SDN/React4ShellExploit Code for React2Shell RCE vulnerability (CVE-2025-55182) affecting React Server Components 19.0.0-19.2.0. Exploits unsafe deserialization for unauthenticated remote code execution.★ 1S3cr3t-SDN2025-12-22CandidatePoC-in-GitHub · ckex/test-vulna controlled environment to test CVE-2025-55182.★ 0ckex2025-12-23CandidatePoC-in-GitHub · jensnesten/React2Shell-PoCRCE exploit PoC for CVE-2025-55182 and CVE-2025-66478 in Next.js and React Server Components with scanner and exploitation tools.★ 6jensnesten2025-12-23CandidatePoC-in-GitHub · Farhan9488/CVE-2025-55182-research🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.★ 0Farhan94882025-12-24CandidatePoC-in-GitHub · bigbluewhale111/CVE-2025-55182-LABThis is a lab for reproducing CVE-2025-55182.★ 0bigbluewhale1112025-12-24CandidatePoC-in-GitHub · guiimoraes/react2shell-evolvedA evolved version of assetnote CVE-2025-55182 scanner★ 2guiimoraes2025-12-24CandidatePoC-in-GitHub · itsismarcos/Bot-exploit-CVE-2025-55182Mass Bot Exploit★ 1itsismarcos2025-12-26CandidatePoC-in-GitHub · 0xROI/CVE-2025-55182Exploitation script for CVE-2025-55182. This is modified only for my personal use. If you are facing any problem fix it yourself.★ 00xROI2025-12-26CandidatePoC-in-GitHub · Updatelap/CVE-2025-55182React2Shell Scanner★ 4Updatelap2025-12-26CandidatePoC-in-GitHub · kanyokoo/React-Server-Components-Remote-Code-Execution-CVE-2025-55182-script to help solve the lab on hackviser covering (CVE-2025-55182)★ 1kanyokoo2025-12-26CandidatePoC-in-GitHub · KingHacker353/R2C-CVE-2025-55182-66478★ 0KingHacker3532025-12-27CandidatePoC-in-GitHub · amirali-ramezani/react2shell-CVE-2025-55182-★ 0amirali-ramezani2025-12-29CandidatePoC-in-GitHub · git0xLai/React2ShellPoCThis repository provides a proof-of-concept for CVE-2025-55182 (React2Shell), a remote code execution vulnerability in React Server Components. It demonstrates how the exploit works, including the payload and impact.★ 0git0xLai2025-12-30CandidatePoC-in-GitHub · hndko/react2shell-rce-autobot🎯 Automated vulnerability scanner for React2Shell RCE - Google dorking + safe detection for CVE-2025-55182/CVE-2025-66478 (CVSS 10.0)★ 0hndko2025-12-30CandidatePoC-in-GitHub · Goultarde/CVE-2025-55182-React2Shell-Lab★ 0Goultarde2025-12-31CandidatePoC-in-GitHub · xiaoLvChen/CVE-2025-55182CVE-2025-55182（React Server Components 反序列化远程代码执行漏洞）★ 1xiaoLvChen2026-01-01CandidatePoC-in-GitHub · captain4554/CVE-2025-55182-Scanner🛡️ Scan and assess vulnerabilities in Next.js/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.★ 1captain45542026-01-02CandidatePoC-in-GitHub · captain4554/captain4554.github.io🔍 Scan for CVE-2025-55182 vulnerabilities with a hybrid tool that combines static and dynamic analysis for improved security assessments.★ 1captain45542026-01-02CandidatePoC-in-GitHub · ghostn4444/CVE-2025-55182CVE-2025-55182 - Tool React2Shell★ 0ghostn44442026-01-02CandidatePoC-in-GitHub · HackIndex-io/React2Shell-CVE-2025-55182A HackIndex.io sandbox environment for the React2Shell vulnerability.★ 0HackIndex-io2026-01-02CandidatePoC-in-GitHub · rahuulmiishra/react2shell-CVE-2025-55182★ 1rahuulmiishra2026-01-03CandidatePoC-in-GitHub · m3ngx1ng/CVE-2025-55182-GUICVE-2025-55182 漏洞检测与利用工具（GUI版）★ 1m3ngx1ng2026-01-03CandidatePoC-in-GitHub · joaovicdev/EXPLOIT-CVE-2025-55182★ 0joaovicdev2026-01-04CandidatePoC-in-GitHub · AdityaBhatt3010/React2Shell-CVE-2025-55182React2Shell CVE-2025-55182: unauthenticated unsafe deserialization in React Server Components leading to reliable remote code execution via the Flight protocol.★ 7AdityaBhatt30102026-01-04CandidatePoC-in-GitHub · gahoole77/gahoole77.github.io🔍 Discover and scan vulnerable Next.js instances to protect your infrastructure from critical RCE vulnerabilities like CVE-2025-55182.★ 0gahoole772026-01-04CandidatePoC-in-GitHub · lucyz1125/CVE-2025-55182-Next.js-RCENextjs RCE Exploit★ 2lucyz11252026-01-05CandidatePoC-in-GitHub · hyan0116/Next.js-RCE-CVE-2025-55182next.js rce exploit★ 0hyan01162026-01-05CandidatePoC-in-GitHub · MyCompanyOrganization/React2Shell-Kingdom"Once upon a time, the Castle of Reactland trusted all Flight messages... until The Imposter arrived." A storytelling CVE-2025-55182 (React2Shell) demo - Medieval-themed vulnerable React Server Components app for security education.★ 0MyCompanyOrganization2026-01-06CandidatePoC-in-GitHub · yannisduvignau/react2shell-exploitCVE-2025-55182, also known as React2Shell, is a critical vulnerability affecting Next.js applications using React Server Components (RSC) and Server Actions.★ 0yannisduvignau2026-01-06CandidatePoC-in-GitHub · en0f/CVE-2025-55182-poc-jsonCVE-2025-55182-poc-json★ 0en0f2026-01-07CandidatePoC-in-GitHub · momika233/CVE-2025-55182-bypassCVE-2025-55182-bypass-waf★ 31momika2332026-01-08CandidatePoC-in-GitHub · mooowu/cve-2025-55182-poc★ 0mooowu2026-01-10CandidatePoC-in-GitHub · Faithtiannn/CVE-2025-55182CVE-2025-55182漏洞检测工具★ 2Faithtiannn2026-01-11CandidatePoC-in-GitHub · termireum/react2shellReact2Shell is a high-performance vulnerability scanner written in Go, specifically designed to detect Server-Side Remote Code Execution (RCE) vulnerabilities in Next.js applications (CVE-2025-55182 & CVE-2025-66478).★ 0termireum2026-01-12CandidatePoC-in-GitHub · Least-Significant-Bit/CVE-2025-55182Remote code execution for React Server Components 19.0.0 - 19.2.0★ 0Least-Significant-Bit2026-01-13CandidatePoC-in-GitHub · faisha1311/React2Shell-CVE-2025-55182-TryHackMe★ 0faisha13112026-01-16CandidatePoC-in-GitHub · BBD-YZZ/CVE-2025-55182CVE-2025-55182(命令执行、反弹shell、注入内存马)★ 0BBD-YZZ2026-01-20CandidatePoC-in-GitHub · Vladjrfhfg/React-site-CVE-2025-55182★ 0Vladjrfhfg2026-01-20CandidatePoC-in-GitHub · Namsom007/CVE-2025-55182-ExploitCVE-2025-55182 React Server Components Remote Code Execution Exploit Lab★ 0Namsom0072026-01-20CandidatePoC-in-GitHub · MemerGamer/CVE-2025-55182CVE-2025-55182★ 2MemerGamer2026-01-22CandidatePoC-in-GitHub · Sairbo/Unihackers---CVE-2025-55182-★ 2Sairbo2026-01-23CandidatePoC-in-GitHub · AsadAhmad-1337/React-2-ShellThis is a security exploit tool targeting CVE-2025-55182. It exploits a Remote Code Execution (RCE) vulnerability in React Server Components★ 5AsadAhmad-13372026-01-27CandidatePoC-in-GitHub · deepankarkumar1/CVE-2025-55182_Vulnerable-Application★ 0deepankarkumar12026-01-29CandidatePoC-in-GitHub · wnaspy/CVE-2025-55182React2shell exploit (CVE-2025-55182+CVE-2025-66478)★ 0wnaspy2026-01-31CandidatePoC-in-GitHub · woorifisa-service-dev-6th/tech-seminar-React2Shell[우리 FISA] 기술 세미나 우승 - 클라우드 서비스 개발 6기 3팀 - React2Shell (CVE-2025-55182) 분석 및 연구★ 1woorifisa-service-dev-6th2026-02-02CandidatePoC-in-GitHub · MuhammadUwais/React2ShellA Firefox extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications.★ 2MuhammadUwais2026-02-03CandidatePoC-in-GitHub · Evillm/CVE-2025-55182-PoC★ 0Evillm2026-02-04CandidatePoC-in-GitHub · BrianLopezM99/react2shell-CVE-2025-55182An exploitation tool for the Next.js vulnerability CVE-2025-55182 that allows remote command execution through a poisoning prototype in React Server Components.★ 1BrianLopezM992026-02-09CandidatePoC-in-GitHub · George0Papasotiriou/CVE-2025-55182-React2Shell-CVSS-10.0-★ 1George0Papasotiriou2026-02-10CandidatePoC-in-GitHub · snipevx/React2Shell-POCReact2Shell (CVE-2025-55182) POC★ 2snipevx2026-02-12CandidatePoC-in-GitHub · BIG02-bot/React2Shell-CVE-2025-55182-An-lise-T-cnica★ 0BIG02-bot2026-02-13CandidatePoC-in-GitHub · Wyl-cmd/CVE-2025-55182针对 Next.js 原型污染漏洞 (CVE-2025-55182) 的高效批量检测工具。★ 1Wyl-cmd2026-02-13CandidatePoC-in-GitHub · H4R335HR/reactshellInteractive shell client for React Server Components RCE exploitation via __proto__ pollution (CVE-2025-55182)★ 0H4R335HR2026-02-17CandidatePoC-in-GitHub · orgito1015/CVE-2025-55182-Researching-process★ 1orgito10152026-02-18CandidatePoC-in-GitHub · 0xBlackash/CVE-2025-55182CVE-2025-55182★ 00xBlackash2026-02-23CandidatePoC-in-GitHub · alptexans/RSC-Detect-CVE-2025-55182RSC Detect CVE 2025 55182★ 190alptexans2026-02-25CandidatePoC-in-GitHub · MrMahile/MassScanning-CVE-2025-55182A lightweight orchestrator and worker scanner setup for running large/continuous scans across split input files. This repository contains orchestration scripts, a Docker-based worker image, and helper scripts to run scans repeatedly and collect results.★ 0MrMahile2026-02-26CandidatePoC-in-GitHub · androidteacher/REACT-CVE-2025-55182-LabLab with PoC★ 0androidteacher2026-02-26CandidatePoC-in-GitHub · InferiorAK/CVE-2025-55182-React2Shell-Async-ScannerAsync RCE scanner for CVE-2025-55182 / CVE-2025-66478 — prototype-pollution → code execution via React Server Actions.★ 3InferiorAK2026-02-28CandidatePoC-in-GitHub · luoqichen/CVE-2025-55182-POC★ 0luoqichen2026-03-06CandidatePoC-in-GitHub · lutraat/CVE-2025-55182-React-RSC-ExploitBasic Proof of Concept (Poc) Exploit for React RSC - CVE-2025-55182★ 0lutraat2026-03-12CandidatePoC-in-GitHub · monarchfish/cve-2025-55182-pocProof-of-concept for CVE-2025-55182 (React2Shell): unauthenticated RCE in React Server Components / Next.js via Flight protocol deserialization.★ 0monarchfish2026-03-17CandidatePoC-in-GitHub · nexxp90/CVE-2025-55182_RCE_ExploitREC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch scanning with custom input, structured payload handling, and clear CLI output.★ 0nexxp902026-03-17CandidatePoC-in-GitHub · luoluoqingge/CVE-2025-55182★ 1luoluoqingge2026-03-18CandidatePoC-in-GitHub · RyosukeDTomita/CVE-2025-55182CVE-2025-55182 — React2Shell★ 0RyosukeDTomita2026-03-24CandidatePoC-in-GitHub · eagle-nett/React2Shell-PoC-CVE-2025-55182Khai thác lỗ hổng bảo mật CVE-2025-55182★ 0eagle-nett2026-03-24CandidatePoC-in-GitHub · devianntsec/CVE-2025-55182Advanced security research on CVE-2025-55182 (React2Shell). Features an exploitation framework with 6 functional impact scenarios (RCE to Secret Exfiltration), an interactive reverse shell, and a complete laboratory. Portfolio piece demonstrating deep analysis of Prototype Pollution and Insecure Deserialization in React Server Components★ 1devianntsec2026-03-25CandidatePoC-in-GitHub · l0lsec/cve-2025-55182-labIntentionally vulnerable Next.js RSC Docker lab for CVE-2025-55182 (React2Shell) local testing★ 0l0lsec2026-03-25CandidatePoC-in-GitHub · 0x0asif/CVE-2025-55182★ 00x0asif2026-03-29CandidatePoC-in-GitHub · amikanev/CVE-2025-55182-LAB★ 0amikanev2026-03-30CandidatePoC-in-GitHub · hujiaozhuzhu/CVE-2025-55182_liyonCVE-2025-55182★ 0hujiaozhuzhu2026-04-02CandidatePoC-in-GitHub · aliksir/nextjs-security-scannerBash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.★ 1aliksir2026-04-03CandidatePoC-in-GitHub · porsellaj/cve-2025-55182-react2shell-analysisTechnical analysis of CVE-2025-55182 (React2Shell RCE vulnerability)★ 0porsellaj2026-04-04CandidatePoC-in-GitHub · masterwok/PoC-CVE-2025-55182CVE-2025-55182 (React2Shell) PoC: Unauthenticated RCE affecting React 19.x and Next.js < 15.1.4. Exploits vulnerabilities in the RSC Flight protocol.★ 0masterwok2026-04-10CandidatePoC-in-GitHub · kaxm23/CVE-2025-55182-Auto-ScannerCVE-2025-55182 Auto Scanner - Improved Version For authorized CTF/testing purposes only★ 0kaxm232026-04-10CandidatePoC-in-GitHub · kaxm23/rust-cve-2025-55182-scannerpowerfull rust cve-2025-55182-scanner used for ctf & ethical purpose only★ 0kaxm232026-04-10CandidatePoC-in-GitHub · RewantChaudhari/nextjs-rce-incident-responseReal-world incident response for CVE-2025-55182 (React2Shell) — script injection, server remediation, and post-incident report★ 0RewantChaudhari2026-04-11CandidatePoC-in-GitHub · oscar-mine/R2SAEFirefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions★ 0oscar-mine2026-04-12CandidatePoC-in-GitHub · AbdullahMaqbool22/Explosive-As-Hell-MCS-Qualifer-Web-500[First-Blood-XO] React Server Component endpoint vulnerable to CVE-2025-55182 (RCE) → enumerated SUID binaries → /usr/bin/perl had SUID set → used Perl's POSIX setuid(0) to escalate to root → read /root/flag.txt★ 0AbdullahMaqbool222026-04-13CandidatePoC-in-GitHub · DeDnY/CVE-2025-55182-poc-panelThis is a special panel that is used to send POC requests with the output of responses.★ 0DeDnY2026-04-13CandidatePoC-in-GitHub · opsecramdan/react2shell-cve-2025-55182★ 0opsecramdan2026-04-15CandidatePoC-in-GitHub · Mohamedniane/cve-2025-55182-analysisSecurity research & exploitation analysis of CVE-2025-55182 (React) — CVSS + OWASP Top 10 mapping★ 0Mohamedniane2026-04-18CandidatePoC-in-GitHub · joaoreis13/flight-riskSecurity toolkit for CVE-2025-55182 (React2Shell) — scan, detect, correlate, and test React Server Components RCE vulnerability★ 0joaoreis132026-04-22CandidatePoC-in-GitHub · shibaaa204/React2ShellPoc for React2Shell CVE-2025-55182★ 0shibaaa2042026-04-24CandidatePoC-in-GitHub · Cybersecurity-Enthusiasts-CE/CVE-2025-55182-Researching-process★ 0Cybersecurity-Enthusiasts-CE2026-04-25CandidatePoC-in-GitHub · MuharremK0/Info-Sys-Security-CVE-2025-55182★ 0MuharremK02026-05-17CandidatePoC-in-GitHub · ycseo-git/CVE-2025-55182a.k.a. React2Shell★ 0ycseo-git2026-05-18CandidatePoC-in-GitHub · Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2ShellCVE-2025-55182 Exploit | by infrar3d★ 0Industri4l-H3ll-Xpl0it3rs2026-05-19CandidatePoC-in-GitHub · renewablehacking/CVE-2025-55182-React-19.2.0★ 1renewablehacking2026-05-23CandidatePoC-in-GitHub · SpeatX/React2Shell-CVE-2025-55182CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.★ 2SpeatX2026-05-24CandidatePoC-in-GitHub · w3nch/CVE-2025-55182-in-go★ 0w3nch2026-05-24CandidatePoC-in-GitHub · Jenderal92/CVE-2025-55182-React2shellCVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE★ 6Jenderal922026-05-25CandidatePoC-in-GitHub · Jeanback1/react-rsc-cve-2025-55182-labEducational lab demonstrating CVE-2025-55182: Critical RCE in React Server Components via prototype pollution in the Flight protocol★ 0Jeanback12026-05-26CandidatePoC-in-GitHub · sonnycroco/HTB-Reactor-Linux-Machine-WalkthroughFull walkthrough of HTB's Reactor machine — exploit CVE-2025-55182 to gain a shell, then get root via an exposed Node.js debugger. Step-by-step with screenshots.★ 1sonnycroco2026-05-28CandidatePoC-in-GitHub · LuizHenz/PoC-CVE-2025-55182★ 0LuizHenz2026-05-29CandidatePoC-in-GitHub · hakkuri01/r2rsInteractive Ruby shell for authorized CVE-2025-55182 (react2shell) testing★ 1hakkuri012026-05-31CandidatePoC-in-GitHub · tanvirahmedcs/CVE-2025-55182react CVE-2025-55182★ 0tanvirahmedcs2026-06-05CandidatePoC-in-GitHub · rvzsec/react2shellreact2shell - CVE-2025-55182 (Next.js: CVE-2025-66478) - Unauthenticated RCE in React Server Components (Flight Protocol) - PoC Exploit★ 0rvzsec2026-06-05CandidatePoC-in-GitHub · TechWithOrgito/CVE-2025-55182-Researching-process★ 0TechWithOrgito2026-06-06CandidatePoC-in-GitHub · AkhmadKholmurodov/React2Shell_ExploitI created simple react2shell CVE-2025-55182 python exploit★ 1AkhmadKholmurodov2026-06-09CandidatePoC-in-GitHub · Alejandro609x/JEFAZO-CVE-2025-55182-CheckerEscáner pasivo de seguridad para CVE-2025-55182 que identifica indicadores públicos asociados a Next.js y React Server Components. Realiza validaciones seguras, analiza cabeceras y rutas, y proporciona una evaluación de exposición basada en evidencias sin explotación.★ 0Alejandro609x2026-06-11CandidatePoC-in-GitHub · olezhaku/react2shell-toolkitToolkit for CVE-2025-55182, also known as React2Shell.★ 4olezhaku2026-06-12CandidatePoC-in-GitHub · cc3305/CVE-2025-55182CVE-2025-55182 exploit script★ 0cc33052026-06-13CandidatePoC-in-GitHub · SentinelXofficial/CVE-2025-55182PoC exploit for CVE-2025-55182 (React2Shell) — Pre-auth RCE in React Server Components | CVSS 10.0★ 1SentinelXofficial2026-06-16CandidatePoC-in-GitHub · Fomovet/cve-2025-55182POC for CVE-2025-55182★ 0Fomovet2026-06-21CandidatePoC-in-GitHub · avoidme12/CVE-2025-55182-POCReact2Shell POC★ 0avoidme122026-06-22CandidatePoC-in-GitHub · litndat/React2Shell-PoC-CVE-2025-55182Khai thác lỗ hổng bảo mật CVE-2025-55182★ 0litndat2026-06-24CandidatePoC-in-GitHub · k1llmelira/react2shell-exploitReact2Shell: CVE-2025-55182 exploit from tryhackme‼️★ 0k1llmelira2026-06-28CandidatePoC-in-GitHub · Herick-Costa/CVE-2025-55182-React2Shell-RCEReact2Shell (CVE-2025-55182) PoC★ 1Herick-Costa2026-06-29CandidatePoC-in-GitHub · diamorphine666/React2shell-CVE-2025-55182-ExploitNext.js / RSC - Unauthenticated RCE (React2Shell) (CVE-2025-55182)★ 0diamorphine6662026-07-06CandidatePoC-in-GitHub · se1zer/Nextjs_Exploit_ToolNext.js RSC RCE Exploit Tool (CVE-2025-55182)★ 5se1zer2026-07-16CandidatePoC-in-GitHub · 6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-★ 06t2kydmp8k-jpg2026-07-21CandidatePoC-in-GitHub · razureink/cve-2025-55182-react2shell_reproductionCVE Reproduction: cve-2025-55182-react2shell_reproduction★ 0razureink2026-07-23CandidatePoC-in-GitHub · indra-031/React2Shell-Exploit-CVE-2025-55182React2Shell is a proof-of-concept exploit for CVE-2025-55182 affecting vulnerable React Server Components (RSC) implementations in Next.js★ 1indra-0312026-07-24CandidatePoC-in-GitHub · Phucc29/CVE-2025-55182★ 0Phucc292026-07-27CandidatePoC-in-GitHub · CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-ExploitAdvanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and professional reporting (JSON/HTML/PDF). Authorized testing only.★ 1CerberusMrXi2026-08-07CandidatePoC-in-GitHub · dotnetguard/CVE-2025-55182-ExploitCVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only.★ 0dotnetguard2026-08-12CandidatePoC-in-GitHub · aisha-jimoh/cve-2025-55182-react2shell-analysisTechnical analysis of CVE-2025-55182 (React2Shell), covering vulnerability mechanics, root cause, controlled PoC testing, impact, and mitigation strategies.★ 0aisha-jimoh2026-08-12CandidatePoC-in-GitHub · balochkainat160-cyber/cs50-cybersecurityCS50's Introduction to Cybersecurity final project on React2Shell (CVE-2025-55182)★ 0balochkainat160-cyber2026-08-14CandidatePoC-in-GitHub · kevin9480/Security_incident_reportReact2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh/Sysmon/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트★ 0kevin94802026-08-16CandidatePoC-in-GitHub · PhanHoangKhang/React2ShellIsolated Docker lab, static detection scanner, and PoC validation for React2Shell (CVE-2025-55182).★ 0PhanHoangKhang2026-08-17CandidatePoC-in-GitHub · h3n1s3/React2shell-ResearchAnalyze and reproduce CVE-2025-55182.★ 0h3n1s32026-08-20CandidatePoC-in-GitHub · Mr-Destroyer/CVE-2025-55182SIMPLE EXPOIT FOR CVE-2025-55182 FOR RCE , COMMAND INJECTIONS AND OTHER VULNERABILITIES★ 0Mr-Destroyer2026-08-24CandidatePoC-in-GitHub · UwUGreed/CVE-2025-55182-pocI know you are probably here from Hack the Box, if so, yes this one actually works.★ 0UwUGreed2026-08-28CandidatePoC-in-GitHub · ChrisBarack/cve-2025-55182★ 0ChrisBarack2026-09-02CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.