PoC-in-GitHub/2025/CVE-2025-55182.json
2025-12-05 03:45:26 +09:00

1389 lines
No EOL
49 KiB
JSON
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

[
{
"id": 1109349830,
"name": "Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js",
"full_name": "BankkRoll\/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js",
"owner": {
"login": "BankkRoll",
"id": 106103625,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106103625?v=4",
"html_url": "https:\/\/github.com\/BankkRoll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BankkRoll\/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js",
"description": "Script to quick check CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Critical unauthenticated RCE vulnerabilities in the React Server Components (RSC) “Flight” protocol.",
"fork": false,
"created_at": "2025-12-03T17:21:52Z",
"updated_at": "2025-12-04T15:50:51Z",
"pushed_at": "2025-12-03T18:10:08Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
{
"id": 1109472359,
"name": "CVE-2025-55182-research",
"full_name": "ejpir\/CVE-2025-55182-research",
"owner": {
"login": "ejpir",
"id": 16493171,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16493171?v=4",
"html_url": "https:\/\/github.com\/ejpir",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ejpir\/CVE-2025-55182-research",
"description": "CVE-2025-55182 POC",
"fork": false,
"created_at": "2025-12-03T21:16:22Z",
"updated_at": "2025-12-04T18:11:58Z",
"pushed_at": "2025-12-04T18:08:33Z",
"stargazers_count": 546,
"watchers_count": 546,
"has_discussions": false,
"forks_count": 164,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 164,
"watchers": 546,
"score": 0,
"subscribers_count": 1
},
{
"id": 1109477572,
"name": "CVE-2025-55182",
"full_name": "sickwell\/CVE-2025-55182",
"owner": {
"login": "sickwell",
"id": 32671944,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32671944?v=4",
"html_url": "https:\/\/github.com\/sickwell",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sickwell\/CVE-2025-55182",
"description": "CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface",
"fork": false,
"created_at": "2025-12-03T21:28:03Z",
"updated_at": "2025-12-04T18:40:21Z",
"pushed_at": "2025-12-04T18:40:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109488174,
"name": "CVE-2025-55182-scanner",
"full_name": "fatguru\/CVE-2025-55182-scanner",
"owner": {
"login": "fatguru",
"id": 53537268,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53537268?v=4",
"html_url": "https:\/\/github.com\/fatguru",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fatguru\/CVE-2025-55182-scanner",
"description": "A non-intrusive surface scanner for CVE-2025-55182 (React Server Components RCE). Detects exposed RSC endpoints in React 19 and Next.js applications",
"fork": false,
"created_at": "2025-12-03T21:52:18Z",
"updated_at": "2025-12-04T18:42:02Z",
"pushed_at": "2025-12-04T16:26:46Z",
"stargazers_count": 46,
"watchers_count": 46,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 46,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109489110,
"name": "Blackash-CVE-2025-55182",
"full_name": "Ashwesker\/Blackash-CVE-2025-55182",
"owner": {
"login": "Ashwesker",
"id": 215029052,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215029052?v=4",
"html_url": "https:\/\/github.com\/Ashwesker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ashwesker\/Blackash-CVE-2025-55182",
"description": "CVE-2025-55182",
"fork": false,
"created_at": "2025-12-03T21:54:35Z",
"updated_at": "2025-12-04T18:32:53Z",
"pushed_at": "2025-12-04T13:25:07Z",
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 40,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109504576,
"name": "CVE-2025-55182",
"full_name": "atastycookie\/CVE-2025-55182",
"owner": {
"login": "atastycookie",
"id": 2944373,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2944373?v=4",
"html_url": "https:\/\/github.com\/atastycookie",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/atastycookie\/CVE-2025-55182",
"description": "CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface",
"fork": false,
"created_at": "2025-12-03T22:33:25Z",
"updated_at": "2025-12-03T22:33:25Z",
"pushed_at": "2025-12-03T22:36:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109508497,
"name": "CVE-2025-55182-analysis",
"full_name": "santihabib\/CVE-2025-55182-analysis",
"owner": {
"login": "santihabib",
"id": 55243343,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55243343?v=4",
"html_url": "https:\/\/github.com\/santihabib",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/santihabib\/CVE-2025-55182-analysis",
"description": null,
"fork": false,
"created_at": "2025-12-03T22:44:03Z",
"updated_at": "2025-12-04T15:54:24Z",
"pushed_at": "2025-12-04T15:54:20Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109554901,
"name": "cve-2025-55182-scanner",
"full_name": "xkillbit\/cve-2025-55182-scanner",
"owner": {
"login": "xkillbit",
"id": 74510491,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74510491?v=4",
"html_url": "https:\/\/github.com\/xkillbit",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xkillbit\/cve-2025-55182-scanner",
"description": null,
"fork": false,
"created_at": "2025-12-04T00:58:58Z",
"updated_at": "2025-12-04T07:06:32Z",
"pushed_at": "2025-12-04T01:27:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109559685,
"name": "java4script",
"full_name": "rpjboyarski\/java4script",
"owner": {
"login": "rpjboyarski",
"id": 8274934,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8274934?v=4",
"html_url": "https:\/\/github.com\/rpjboyarski",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rpjboyarski\/java4script",
"description": "Testing the React Server Components RCE (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-04T01:12:43Z",
"updated_at": "2025-12-04T03:12:46Z",
"pushed_at": "2025-12-04T03:11:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109565745,
"name": "CVE-2025-55182-poc",
"full_name": "whiteov3rflow\/CVE-2025-55182-poc",
"owner": {
"login": "whiteov3rflow",
"id": 35066771,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35066771?v=4",
"html_url": "https:\/\/github.com\/whiteov3rflow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/whiteov3rflow\/CVE-2025-55182-poc",
"description": "React2Shell Proof of Concept",
"fork": false,
"created_at": "2025-12-04T01:29:45Z",
"updated_at": "2025-12-04T18:09:33Z",
"pushed_at": "2025-12-04T01:57:17Z",
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve-2025-55182",
"cve-scanning",
"poc",
"security-tools"
],
"visibility": "public",
"forks": 12,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109574412,
"name": "exploit-CVE-2025-55182-poc",
"full_name": "Pa2sw0rd\/exploit-CVE-2025-55182-poc",
"owner": {
"login": "Pa2sw0rd",
"id": 50995900,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50995900?v=4",
"html_url": "https:\/\/github.com\/Pa2sw0rd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Pa2sw0rd\/exploit-CVE-2025-55182-poc",
"description": "This POC demonstrates CVE-2025-55182 using actual `react-server-dom-webpack@19.0.0` vulnerable code.",
"fork": false,
"created_at": "2025-12-04T01:54:22Z",
"updated_at": "2025-12-04T03:06:45Z",
"pushed_at": "2025-12-04T02:06:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109575088,
"name": "CVE-2025-55182",
"full_name": "kk12-30\/CVE-2025-55182",
"owner": {
"login": "kk12-30",
"id": 51871401,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51871401?v=4",
"html_url": "https:\/\/github.com\/kk12-30",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kk12-30\/CVE-2025-55182",
"description": "CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T01:56:11Z",
"updated_at": "2025-12-04T01:57:40Z",
"pushed_at": "2025-12-04T01:57:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109576518,
"name": "rsc_detect_CVE-2025-55182",
"full_name": "heiheishushu\/rsc_detect_CVE-2025-55182",
"owner": {
"login": "heiheishushu",
"id": 244636180,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244636180?v=4",
"html_url": "https:\/\/github.com\/heiheishushu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/heiheishushu\/rsc_detect_CVE-2025-55182",
"description": "For CVE-2025-55182 and CVE-2025-66478 Security Response",
"fork": false,
"created_at": "2025-12-04T02:00:00Z",
"updated_at": "2025-12-04T10:10:14Z",
"pushed_at": "2025-12-04T02:16:56Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109578659,
"name": "CVE-2025-55182",
"full_name": "songsanggggg\/CVE-2025-55182",
"owner": {
"login": "songsanggggg",
"id": 95994511,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95994511?v=4",
"html_url": "https:\/\/github.com\/songsanggggg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/songsanggggg\/CVE-2025-55182",
"description": "CVE-2025-55182 漏洞利用GUI,PoC \/ Exploit for CVE-2025-55182 & CVE-2025-66478",
"fork": false,
"created_at": "2025-12-04T02:05:24Z",
"updated_at": "2025-12-04T02:05:24Z",
"pushed_at": "2025-12-04T01:33:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109587217,
"name": "next.js-scanner",
"full_name": "M0onPu15e\/next.js-scanner",
"owner": {
"login": "M0onPu15e",
"id": 199017970,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199017970?v=4",
"html_url": "https:\/\/github.com\/M0onPu15e",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/M0onPu15e\/next.js-scanner",
"description": "检测针对 CVE-2025-55182React 服务器组件远程代码执行漏洞)的扫描器",
"fork": false,
"created_at": "2025-12-04T02:28:10Z",
"updated_at": "2025-12-04T02:31:40Z",
"pushed_at": "2025-12-04T02:31:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109594001,
"name": "CVE-2025-55182",
"full_name": "ThemeHackers\/CVE-2025-55182",
"owner": {
"login": "ThemeHackers",
"id": 107047730,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107047730?v=4",
"html_url": "https:\/\/github.com\/ThemeHackers",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ThemeHackers\/CVE-2025-55182",
"description": "a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic \"Lab Environment\" to safely test and understand the vulnerability.",
"fork": false,
"created_at": "2025-12-04T02:46:54Z",
"updated_at": "2025-12-04T06:44:53Z",
"pushed_at": "2025-12-04T02:57:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109609433,
"name": "CVE-2025-55182-realistic-poc",
"full_name": "joshterrill\/CVE-2025-55182-realistic-poc",
"owner": {
"login": "joshterrill",
"id": 5368757,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5368757?v=4",
"html_url": "https:\/\/github.com\/joshterrill",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joshterrill\/CVE-2025-55182-realistic-poc",
"description": "a realistic POC demonstrating the missing `hasOwnProperty` check in react-server-dom-webpack@19.0.0",
"fork": false,
"created_at": "2025-12-04T03:28:30Z",
"updated_at": "2025-12-04T03:31:13Z",
"pushed_at": "2025-12-04T03:31:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109640241,
"name": "CVE-2025-55182-TOOLS",
"full_name": "mingyisecurity-lab\/CVE-2025-55182-TOOLS",
"owner": {
"login": "mingyisecurity-lab",
"id": 247722131,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247722131?v=4",
"html_url": "https:\/\/github.com\/mingyisecurity-lab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mingyisecurity-lab\/CVE-2025-55182-TOOLS",
"description": "A Comprehensive CVE-2025-55182 Detection and Security Assessment Tool",
"fork": false,
"created_at": "2025-12-04T04:45:18Z",
"updated_at": "2025-12-04T04:49:03Z",
"pushed_at": "2025-12-04T04:48:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109665785,
"name": "rust-flight",
"full_name": "joaonevess\/rust-flight",
"owner": {
"login": "joaonevess",
"id": 49655948,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49655948?v=4",
"html_url": "https:\/\/github.com\/joaonevess",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joaonevess\/rust-flight",
"description": "High-performance exploitation engine for CVE-2025-55182 (React Server Components RCE)",
"fork": false,
"created_at": "2025-12-04T05:44:05Z",
"updated_at": "2025-12-04T07:53:24Z",
"pushed_at": "2025-12-04T07:58:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109670650,
"name": "react2shell-scanner",
"full_name": "gensecaihq\/react2shell-scanner",
"owner": {
"login": "gensecaihq",
"id": 216218562,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216218562?v=4",
"html_url": "https:\/\/github.com\/gensecaihq",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gensecaihq\/react2shell-scanner",
"description": "Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm\/pnpm\/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.",
"fork": false,
"created_at": "2025-12-04T05:54:18Z",
"updated_at": "2025-12-04T18:39:32Z",
"pushed_at": "2025-12-04T18:39:35Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve-2025-55182",
"nextjs",
"react2shell",
"reactjs",
"scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109696160,
"name": "CVE-2025-55182POC",
"full_name": "sudo-Yangziran\/CVE-2025-55182POC",
"owner": {
"login": "sudo-Yangziran",
"id": 75308119,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75308119?v=4",
"html_url": "https:\/\/github.com\/sudo-Yangziran",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sudo-Yangziran\/CVE-2025-55182POC",
"description": null,
"fork": false,
"created_at": "2025-12-04T06:46:45Z",
"updated_at": "2025-12-04T06:51:28Z",
"pushed_at": "2025-12-04T06:51:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109698083,
"name": "CVE-2025-55182-Tools",
"full_name": "Rsatan\/CVE-2025-55182-Tools",
"owner": {
"login": "Rsatan",
"id": 38817161,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38817161?v=4",
"html_url": "https:\/\/github.com\/Rsatan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rsatan\/CVE-2025-55182-Tools",
"description": "一款针对 CVE-2025-55182 的独立安全评估工具,基于 Go 开发提供图形化界面GUI用于快速完成漏洞检测与验证。",
"fork": false,
"created_at": "2025-12-04T06:50:31Z",
"updated_at": "2025-12-04T09:42:50Z",
"pushed_at": "2025-12-04T07:45:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109700440,
"name": "react2shell-scanner",
"full_name": "assetnote\/react2shell-scanner",
"owner": {
"login": "assetnote",
"id": 35264812,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35264812?v=4",
"html_url": "https:\/\/github.com\/assetnote",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/assetnote\/react2shell-scanner",
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2025-12-04T18:44:01Z",
"pushed_at": "2025-12-04T07:26:45Z",
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 81,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109709529,
"name": "CVE-2025-55182-exploit",
"full_name": "jf0x3a\/CVE-2025-55182-exploit",
"owner": {
"login": "jf0x3a",
"id": 91169234,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91169234?v=4",
"html_url": "https:\/\/github.com\/jf0x3a",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jf0x3a\/CVE-2025-55182-exploit",
"description": "RCE Auto exploit for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T07:12:27Z",
"updated_at": "2025-12-04T11:59:13Z",
"pushed_at": "2025-12-04T07:19:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109726348,
"name": "CVE-2025-55182-checker",
"full_name": "aspen-labs\/CVE-2025-55182-checker",
"owner": {
"login": "aspen-labs",
"id": 208040413,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208040413?v=4",
"html_url": "https:\/\/github.com\/aspen-labs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aspen-labs\/CVE-2025-55182-checker",
"description": "React\/Next.js RCE CVE-2025-55182 checker",
"fork": false,
"created_at": "2025-12-04T07:44:39Z",
"updated_at": "2025-12-04T07:50:59Z",
"pushed_at": "2025-12-04T07:50:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109770096,
"name": "cve-2025-55182",
"full_name": "dissy123\/cve-2025-55182",
"owner": {
"login": "dissy123",
"id": 5930734,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5930734?v=4",
"html_url": "https:\/\/github.com\/dissy123",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dissy123\/cve-2025-55182",
"description": null,
"fork": false,
"created_at": "2025-12-04T09:02:10Z",
"updated_at": "2025-12-04T09:05:43Z",
"pushed_at": "2025-12-04T09:05:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109785752,
"name": "CVE-2025-55182",
"full_name": "dwisiswant0\/CVE-2025-55182",
"owner": {
"login": "dwisiswant0",
"id": 25837540,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25837540?v=4",
"html_url": "https:\/\/github.com\/dwisiswant0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dwisiswant0\/CVE-2025-55182",
"description": "Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.",
"fork": false,
"created_at": "2025-12-04T09:27:55Z",
"updated_at": "2025-12-04T18:41:12Z",
"pushed_at": "2025-12-04T09:30:16Z",
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": true,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109806025,
"name": "CVE-2025-55182-test",
"full_name": "Chelsea486MHz\/CVE-2025-55182-test",
"owner": {
"login": "Chelsea486MHz",
"id": 12125422,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12125422?v=4",
"html_url": "https:\/\/github.com\/Chelsea486MHz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Chelsea486MHz\/CVE-2025-55182-test",
"description": "See if your endpoint could be vulnerable.",
"fork": false,
"created_at": "2025-12-04T10:01:43Z",
"updated_at": "2025-12-04T10:18:00Z",
"pushed_at": "2025-12-04T10:17:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109842202,
"name": "React2shell-CVE-2025-55182-checker",
"full_name": "oways\/React2shell-CVE-2025-55182-checker",
"owner": {
"login": "oways",
"id": 11142952,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11142952?v=4",
"html_url": "https:\/\/github.com\/oways",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oways\/React2shell-CVE-2025-55182-checker",
"description": null,
"fork": false,
"created_at": "2025-12-04T11:04:37Z",
"updated_at": "2025-12-04T11:38:59Z",
"pushed_at": "2025-12-04T11:38:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109867793,
"name": "CVE-2025-55182",
"full_name": "msanft\/CVE-2025-55182",
"owner": {
"login": "msanft",
"id": 58110325,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58110325?v=4",
"html_url": "https:\/\/github.com\/msanft",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/msanft\/CVE-2025-55182",
"description": "Explanation and PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2025-12-04T18:40:53Z",
"pushed_at": "2025-12-04T13:33:48Z",
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 32,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109868511,
"name": "React19-fix-vibecoders",
"full_name": "ivaavimusic\/React19-fix-vibecoders",
"owner": {
"login": "ivaavimusic",
"id": 99599836,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99599836?v=4",
"html_url": "https:\/\/github.com\/ivaavimusic",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ivaavimusic\/React19-fix-vibecoders",
"description": "CVE-2025-55182 Fix for Vibe Coders",
"fork": false,
"created_at": "2025-12-04T11:51:11Z",
"updated_at": "2025-12-04T11:52:37Z",
"pushed_at": "2025-12-04T11:51:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109875047,
"name": "CVE-2025-55182",
"full_name": "carlosaruy\/CVE-2025-55182",
"owner": {
"login": "carlosaruy",
"id": 57971561,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57971561?v=4",
"html_url": "https:\/\/github.com\/carlosaruy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/carlosaruy\/CVE-2025-55182",
"description": "a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic \"Lab Environment\" to safely test and understand the vulnerability.",
"fork": false,
"created_at": "2025-12-04T12:02:35Z",
"updated_at": "2025-12-04T12:04:22Z",
"pushed_at": "2025-12-04T02:57:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109886570,
"name": "freight-night-rce-react-next-CVE-2025-55182-CVE-2025-66478",
"full_name": "Security-Phoenix-demo\/freight-night-rce-react-next-CVE-2025-55182-CVE-2025-66478",
"owner": {
"login": "Security-Phoenix-demo",
"id": 79762943,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79762943?v=4",
"html_url": "https:\/\/github.com\/Security-Phoenix-demo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Security-Phoenix-demo\/freight-night-rce-react-next-CVE-2025-55182-CVE-2025-66478",
"description": "Scanner for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) - Track and remediate a critical React Server Components (RSC) \/ Flight protocol vulnerability campaign impacting react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack, and RSC-enabled frameworks like Next.js. ",
"fork": false,
"created_at": "2025-12-04T12:22:26Z",
"updated_at": "2025-12-04T14:48:23Z",
"pushed_at": "2025-12-04T14:31:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109912949,
"name": "CVE-2025-55182",
"full_name": "c0rydoras\/CVE-2025-55182",
"owner": {
"login": "c0rydoras",
"id": 110528300,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110528300?v=4",
"html_url": "https:\/\/github.com\/c0rydoras",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/c0rydoras\/CVE-2025-55182",
"description": "some notes && (somewhat?) poc-adjacent stuff for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T13:07:00Z",
"updated_at": "2025-12-04T17:01:11Z",
"pushed_at": "2025-12-04T13:36:59Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve-2025-55182"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109938914,
"name": "React2Shell-Scanner",
"full_name": "CymulateResearch\/React2Shell-Scanner",
"owner": {
"login": "CymulateResearch",
"id": 121092418,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121092418?v=4",
"html_url": "https:\/\/github.com\/CymulateResearch",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CymulateResearch\/React2Shell-Scanner",
"description": "React2Shell Scanner (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T13:47:52Z",
"updated_at": "2025-12-04T18:24:18Z",
"pushed_at": "2025-12-04T13:54:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109941407,
"name": "cve-2025-55182",
"full_name": "0xPThree\/cve-2025-55182",
"owner": {
"login": "0xPThree",
"id": 108757172,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108757172?v=4",
"html_url": "https:\/\/github.com\/0xPThree",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xPThree\/cve-2025-55182",
"description": null,
"fork": false,
"created_at": "2025-12-04T13:51:39Z",
"updated_at": "2025-12-04T14:39:29Z",
"pushed_at": "2025-12-04T14:39:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109970481,
"name": "CVE-2025-55182-docker-lab",
"full_name": "SoICT-BKSEC\/CVE-2025-55182-docker-lab",
"owner": {
"login": "SoICT-BKSEC",
"id": 204863789,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204863789?v=4",
"html_url": "https:\/\/github.com\/SoICT-BKSEC",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SoICT-BKSEC\/CVE-2025-55182-docker-lab",
"description": "Vulnerable Docker environment for reproducing CVE-2025-55182.",
"fork": false,
"created_at": "2025-12-04T14:34:15Z",
"updated_at": "2025-12-04T14:46:26Z",
"pushed_at": "2025-12-04T14:43:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109980602,
"name": "CVE-2025-55182-vite-rsc",
"full_name": "acheong08\/CVE-2025-55182-vite-rsc",
"owner": {
"login": "acheong08",
"id": 36258159,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36258159?v=4",
"html_url": "https:\/\/github.com\/acheong08",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/acheong08\/CVE-2025-55182-vite-rsc",
"description": "POC and detection for CVE-2025-55182 for Vite Rsc. Real shit, not LLM generated :)",
"fork": false,
"created_at": "2025-12-04T14:49:43Z",
"updated_at": "2025-12-04T18:07:11Z",
"pushed_at": "2025-12-04T18:07:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110016297,
"name": "react2shellVulnApp",
"full_name": "jctommasi\/react2shellVulnApp",
"owner": {
"login": "jctommasi",
"id": 38330727,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38330727?v=4",
"html_url": "https:\/\/github.com\/jctommasi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jctommasi\/react2shellVulnApp",
"description": "Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.",
"fork": false,
"created_at": "2025-12-04T15:43:43Z",
"updated_at": "2025-12-04T17:44:58Z",
"pushed_at": "2025-12-04T15:45:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110044386,
"name": "CVE-2025-55182-POC-SCANNER",
"full_name": "cropnet\/CVE-2025-55182-POC-SCANNER",
"owner": {
"login": "cropnet",
"id": 44521465,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44521465?v=4",
"html_url": "https:\/\/github.com\/cropnet",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cropnet\/CVE-2025-55182-POC-SCANNER",
"description": "Unified Security Research Tool",
"fork": false,
"created_at": "2025-12-04T16:27:37Z",
"updated_at": "2025-12-04T17:04:20Z",
"pushed_at": "2025-12-04T17:04:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve-2025-55182"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110052667,
"name": "react2shell-PoC",
"full_name": "shamo0\/react2shell-PoC",
"owner": {
"login": "shamo0",
"id": 48299520,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48299520?v=4",
"html_url": "https:\/\/github.com\/shamo0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shamo0\/react2shell-PoC",
"description": "Nuclei template for detecting react2shell (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T16:40:45Z",
"updated_at": "2025-12-04T17:14:15Z",
"pushed_at": "2025-12-04T16:54:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve-2025-55182",
"cve-2025-66478",
"nextjs",
"poc",
"rce",
"react2shell",
"rsc"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110061848,
"name": "CVE-2025-55182-POC",
"full_name": "EynaExp\/CVE-2025-55182-POC",
"owner": {
"login": "EynaExp",
"id": 59816538,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59816538?v=4",
"html_url": "https:\/\/github.com\/EynaExp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EynaExp\/CVE-2025-55182-POC",
"description": "Poc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages)",
"fork": false,
"created_at": "2025-12-04T16:55:23Z",
"updated_at": "2025-12-04T17:37:18Z",
"pushed_at": "2025-12-04T17:33:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110078814,
"name": "CVE-2025-55182-PoC",
"full_name": "Emiyelbarto\/CVE-2025-55182-PoC",
"owner": {
"login": "Emiyelbarto",
"id": 35306690,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35306690?v=4",
"html_url": "https:\/\/github.com\/Emiyelbarto",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Emiyelbarto\/CVE-2025-55182-PoC",
"description": "Poc for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T17:23:20Z",
"updated_at": "2025-12-04T18:44:10Z",
"pushed_at": "2025-12-04T18:06:40Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110103630,
"name": "CVE-2025-55182-shellinteractive",
"full_name": "MrR0b0t19\/CVE-2025-55182-shellinteractive",
"owner": {
"login": "MrR0b0t19",
"id": 63489501,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63489501?v=4",
"html_url": "https:\/\/github.com\/MrR0b0t19",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MrR0b0t19\/CVE-2025-55182-shellinteractive",
"description": null,
"fork": false,
"created_at": "2025-12-04T18:05:05Z",
"updated_at": "2025-12-04T18:34:38Z",
"pushed_at": "2025-12-04T18:11:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]