CVE-2025-55182

🔴 OWASP Nettacker, Remote Code Execution, #CVE-2025-55182 (Critical) -DC-Oct2026-3717 https://t.co/8OhTXFZaM7

#threatreport #HighCompleteness EtherRAT spread through IT support impersonation on Microsoft Teams: Ethereum smart contract as a C&C resolution mechanism | 18-10-2026 Source: https://t.co/DyZ8CdiHXq Key details below ↓ 🧑‍💻Actors/Campaigns: Contagious_interview 💀Threats: Etherrat, Etherhiding_techn…

2. React2Shell A critical React Server Components vulnerability, CVE-2025-55182, was disclosed in December 2025. It received a CVSS score of 10.0. Lesson: Even modern frameworks like React and Next.js need security updates. #reactjs #react #React2Shell

AI is here, and the internet is only going to drown in more AI slop. Take php2shell: before the patch dropped, most of the so-called “exploits” circulating online were bogus. The same thing happened earlier with Next.js React2Shell (CVE-2025-55182).

🚨 Still running unpatched React or Next.js? React2Shell (CVE-2025-55182): one crafted HTTP request ➡️ remote code execution. No login needed. 😱 Max severity. Exploited in the wild. ~40% of cloud environments exposed. Patch. Segment. Monitor. 👇 #AppSec #NextJS #ReactJS https://t.co/d5J0MFPhlp

[EXPLOIT] CVE-2025-55182 [CRITICAL/PoC] CVSS: 10 | Vendor: #Meta ReactorWriteUp-HackTheBox 🔗 https://t.co/e53CpR0MVG

🔴 #GitHub, Information Disclosure, #CVE-2025-55182 (Critical) -DC-Oct2026-3107 https://t.co/CPjeOAGnNP

[EXPLOIT] CVE-2025-55182 [CRITICAL/PoC] CVSS: 10 | Vendor: #Meta react2shell-scanner 🔗 https://t.co/txpnuVIgzd

🔴 Nextjs, Remote Code Execution, #CVE-2025-55182 (Critical) -DC-Oct2026-3069 https://t.co/UI6LZRltzT

[EXPLOIT] CVE-2025-55182 [CRITICAL/PoC] CVSS: 10 | Vendor: #Meta CVE-2025-55182 🔗 https://t.co/ErCDR3qYFr

manshoor/php2shell-scanner: Detection + remediation scanner for php2shell (CVE-2026-109618/109619) and react2shell (CVE-2025-55182).

0xRAM-bit/CVE-2025-55182:

j0lt-github/react2shell-burp: Burp Suite extension for identifying the React Server Components unsafe deserialization vulnerability (React2Shell / CVE-2025-55182). It provides a focused UI tab, context-menu actions, active-scanner integration, and optional Burp Collaborator confirmation.

Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell: CVE-2025-55182 Exploit | by infrar3d

M4rc3l08/ReactorWriteUp-HackTheBox: Reactor es una máquina Linux fácil vulnerable a CVE-2025-55182 (React2Shell), RCE sin autenticación en React Server Components. Accedemos como node, crackeamos un hash MD5 de una base de datos SQLite y pivotamos a engineer por SSH. La escalada abusa del flag --in…

0xBlackash/CVE-2025-55182: CVE-2025-55182

SentinelXofficial/CVE-2025-55182: PoC exploit for CVE-2025-55182 (React2Shell) — Pre-auth RCE in React Server Components | CVSS 10.0

foxcornlab/react2shell-scanner: Triage scanner for CVE-2025-55182 (React2Shell) and CVE-2025-66478. Local audit, remote fingerprint, log hunting. Detection only, no payloads.

Frizzardsecurity/CVE-2025-55182: PoC for CVE-2025-55182

OhSoomin812/cve-2025-55182-ctf: CVE-2025-55182 "Ghost Action" — pre-auth RCE (React Flight deserialization, Next.js 15.5.6) CTF challenge. Problem only; solve/writeup excluded.