PoC-in-GitHub/2025/CVE-2025-66478.json
2025-12-13 03:45:52 +09:00

583 lines
No EOL
20 KiB
JSON

[
{
"id": 1109394752,
"name": "next-cve-2025-66478",
"full_name": "abtonc\/next-cve-2025-66478",
"owner": {
"login": "abtonc",
"id": 62848063,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62848063?v=4",
"html_url": "https:\/\/github.com\/abtonc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abtonc\/next-cve-2025-66478",
"description": null,
"fork": false,
"created_at": "2025-12-03T18:38:53Z",
"updated_at": "2025-12-08T15:59:02Z",
"pushed_at": "2025-12-08T15:58:59Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109726413,
"name": "CVE-2025-66478-POC",
"full_name": "wangxso\/CVE-2025-66478-POC",
"owner": {
"login": "wangxso",
"id": 35062162,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35062162?v=4",
"html_url": "https:\/\/github.com\/wangxso",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wangxso\/CVE-2025-66478-POC",
"description": "CVE-2025-66478 Proof of Concept",
"fork": false,
"created_at": "2025-12-04T07:44:47Z",
"updated_at": "2025-12-11T08:10:13Z",
"pushed_at": "2025-12-11T08:10:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1109917013,
"name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478",
"full_name": "Malayke\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
"owner": {
"login": "Malayke",
"id": 4935500,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4935500?v=4",
"html_url": "https:\/\/github.com\/Malayke",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Malayke\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
"description": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.",
"fork": false,
"created_at": "2025-12-04T13:13:33Z",
"updated_at": "2025-12-12T16:37:06Z",
"pushed_at": "2025-12-06T11:42:39Z",
"stargazers_count": 344,
"watchers_count": 344,
"has_discussions": false,
"forks_count": 72,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve",
"cve-2025-66478",
"cve-scanning",
"nextjs"
],
"visibility": "public",
"forks": 72,
"watchers": 344,
"score": 0,
"subscribers_count": 1
},
{
"id": 1110188862,
"name": "check-cve-2025-66478",
"full_name": "mattcbarrett\/check-cve-2025-66478",
"owner": {
"login": "mattcbarrett",
"id": 20583142,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20583142?v=4",
"html_url": "https:\/\/github.com\/mattcbarrett",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mattcbarrett\/check-cve-2025-66478",
"description": "Checks if your NextJS server is vulnerable to CVE-2025-66478",
"fork": false,
"created_at": "2025-12-04T20:50:51Z",
"updated_at": "2025-12-05T16:11:47Z",
"pushed_at": "2025-12-05T16:11:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1110894422,
"name": "react2shell-ultimate",
"full_name": "hackersatyamrastogi\/react2shell-ultimate",
"owner": {
"login": "hackersatyamrastogi",
"id": 47441267,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47441267?v=4",
"html_url": "https:\/\/github.com\/hackersatyamrastogi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hackersatyamrastogi\/react2shell-ultimate",
"description": "React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.",
"fork": false,
"created_at": "2025-12-05T22:20:14Z",
"updated_at": "2025-12-12T07:39:44Z",
"pushed_at": "2025-12-10T09:35:17Z",
"stargazers_count": 106,
"watchers_count": 106,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"bug-bounty",
"cve-2025-55182",
"cve-2025-66478",
"cybersecurity",
"nextjs",
"penetration-testing",
"rce",
"react-server-components",
"security-scanner",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 21,
"watchers": 106,
"score": 0,
"subscribers_count": 2
},
{
"id": 1110970432,
"name": "fix-react2shell-next",
"full_name": "vercel-labs\/fix-react2shell-next",
"owner": {
"login": "vercel-labs",
"id": 108547162,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108547162?v=4",
"html_url": "https:\/\/github.com\/vercel-labs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vercel-labs\/fix-react2shell-next",
"description": "One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js \/ React RSC app.",
"fork": false,
"created_at": "2025-12-06T02:41:12Z",
"updated_at": "2025-12-12T17:13:50Z",
"pushed_at": "2025-12-12T03:03:50Z",
"stargazers_count": 294,
"watchers_count": 294,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 44,
"watchers": 294,
"score": 0,
"subscribers_count": 1
},
{
"id": 1111055409,
"name": "CVE-2025-66478-Exploit-Poc",
"full_name": "namest504\/CVE-2025-66478-Exploit-Poc",
"owner": {
"login": "namest504",
"id": 61047602,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61047602?v=4",
"html_url": "https:\/\/github.com\/namest504",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/namest504\/CVE-2025-66478-Exploit-Poc",
"description": null,
"fork": false,
"created_at": "2025-12-06T07:12:45Z",
"updated_at": "2025-12-12T13:03:05Z",
"pushed_at": "2025-12-06T08:25:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1111439739,
"name": "CVE-2025-66478-kinda-waf",
"full_name": "aiexz\/CVE-2025-66478-kinda-waf",
"owner": {
"login": "aiexz",
"id": 42418433,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42418433?v=4",
"html_url": "https:\/\/github.com\/aiexz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aiexz\/CVE-2025-66478-kinda-waf",
"description": "Let's help websites stay safe until they are properly patched!",
"fork": false,
"created_at": "2025-12-06T23:52:07Z",
"updated_at": "2025-12-07T00:06:55Z",
"pushed_at": "2025-12-07T00:06:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1111449339,
"name": "CVE-2025-66478",
"full_name": "Rhyru9\/CVE-2025-66478",
"owner": {
"login": "Rhyru9",
"id": 164749781,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164749781?v=4",
"html_url": "https:\/\/github.com\/Rhyru9",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rhyru9\/CVE-2025-66478",
"description": null,
"fork": false,
"created_at": "2025-12-07T00:32:06Z",
"updated_at": "2025-12-07T02:42:12Z",
"pushed_at": "2025-12-07T02:42:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1111479834,
"name": "CVE-2025-66478-github-patcher",
"full_name": "Jibaru\/CVE-2025-66478-github-patcher",
"owner": {
"login": "Jibaru",
"id": 54339832,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54339832?v=4",
"html_url": "https:\/\/github.com\/Jibaru",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Jibaru\/CVE-2025-66478-github-patcher",
"description": null,
"fork": false,
"created_at": "2025-12-07T02:39:22Z",
"updated_at": "2025-12-07T02:40:05Z",
"pushed_at": "2025-12-07T02:40:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1112024960,
"name": "CVE-2025-66478",
"full_name": "ExpTechTW\/CVE-2025-66478",
"owner": {
"login": "ExpTechTW",
"id": 91672109,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91672109?v=4",
"html_url": "https:\/\/github.com\/ExpTechTW",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ExpTechTW\/CVE-2025-66478",
"description": null,
"fork": false,
"created_at": "2025-12-08T03:30:20Z",
"updated_at": "2025-12-10T02:39:40Z",
"pushed_at": "2025-12-08T03:45:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1112082516,
"name": "cve-2025-66478",
"full_name": "abhirajranjan\/cve-2025-66478",
"owner": {
"login": "abhirajranjan",
"id": 61920199,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61920199?v=4",
"html_url": "https:\/\/github.com\/abhirajranjan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abhirajranjan\/cve-2025-66478",
"description": null,
"fork": false,
"created_at": "2025-12-08T05:59:27Z",
"updated_at": "2025-12-08T08:54:03Z",
"pushed_at": "2025-12-08T08:53:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1112335315,
"name": "cve-2025-66478_rce_vulnerable",
"full_name": "Letalandroid\/cve-2025-66478_rce_vulnerable",
"owner": {
"login": "Letalandroid",
"id": 78810527,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78810527?v=4",
"html_url": "https:\/\/github.com\/Letalandroid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Letalandroid\/cve-2025-66478_rce_vulnerable",
"description": "IMPORTANTE: Proyecto de Next JS VULNERABLE creado solo para fines educativos, de pruebas y explotación, NO SE RECOMIENDA INSTALACIÓN EN PRODUCCION, SÓLO PARA ÁMBITO LOCAL O ENTORNO CONTROLADO",
"fork": false,
"created_at": "2025-12-08T13:34:49Z",
"updated_at": "2025-12-08T14:46:30Z",
"pushed_at": "2025-12-08T14:46:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1112453375,
"name": "React4Shell",
"full_name": "adrianhazgarcia\/React4Shell",
"owner": {
"login": "adrianhazgarcia",
"id": 124706541,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124706541?v=4",
"html_url": "https:\/\/github.com\/adrianhazgarcia",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adrianhazgarcia\/React4Shell",
"description": "Testing environment for trying CVE-2025-66478 ",
"fork": false,
"created_at": "2025-12-08T16:39:09Z",
"updated_at": "2025-12-08T20:27:46Z",
"pushed_at": "2025-12-08T20:27:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1112600385,
"name": "react2shell-honeypot",
"full_name": "strainxx\/react2shell-honeypot",
"owner": {
"login": "strainxx",
"id": 100953533,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100953533?v=4",
"html_url": "https:\/\/github.com\/strainxx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/strainxx\/react2shell-honeypot",
"description": "My attempt to make honeypot for React2Shell vulnerability (CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-08T21:11:00Z",
"updated_at": "2025-12-11T21:02:26Z",
"pushed_at": "2025-12-08T21:12:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [
"cve",
"cve-2025-66478",
"honeypot",
"nextjs",
"react",
"react2shell"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1114163525,
"name": "Next.js-RSC-RCE-Scanner-CVE-2025-66478",
"full_name": "changgun-lee\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
"owner": {
"login": "changgun-lee",
"id": 155412589,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155412589?v=4",
"html_url": "https:\/\/github.com\/changgun-lee",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/changgun-lee\/Next.js-RSC-RCE-Scanner-CVE-2025-66478",
"description": null,
"fork": false,
"created_at": "2025-12-11T01:49:52Z",
"updated_at": "2025-12-11T02:00:58Z",
"pushed_at": "2025-12-11T02:00:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1114638183,
"name": "nexts-cve-2025-66478-exploit",
"full_name": "Code42Cate\/nexts-cve-2025-66478-exploit",
"owner": {
"login": "Code42Cate",
"id": 26679776,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26679776?v=4",
"html_url": "https:\/\/github.com\/Code42Cate",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Code42Cate\/nexts-cve-2025-66478-exploit",
"description": null,
"fork": false,
"created_at": "2025-12-11T16:57:40Z",
"updated_at": "2025-12-11T17:09:29Z",
"pushed_at": "2025-12-11T17:09:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1115242689,
"name": "poc-cve-next",
"full_name": "viperh\/poc-cve-next",
"owner": {
"login": "viperh",
"id": 65122445,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65122445?v=4",
"html_url": "https:\/\/github.com\/viperh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/viperh\/poc-cve-next",
"description": "PoC for Next.js RCE Vulnerability CVE-2025-66478",
"fork": false,
"created_at": "2025-12-12T14:54:11Z",
"updated_at": "2025-12-12T14:57:39Z",
"pushed_at": "2025-12-12T14:57:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]