Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

88,871cataloged exploits
40,961CVEs with public exploitation
24,696lab-tested
AllReferência 26,571Exploit-DB 24,489GitHub PoC 18,446VulnCheck XDB 11,241Nuclei 4,584Metasploit 3,540✓ verified onlyrecentpopularrisk
88,871 exploits
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 2
React2Shell Vulnerability
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
VulnCheck XDB
infoleak
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Heuristic security scanner for detecting React Server Components (RSC) vulnerabilities, including React2Shell-style behavior (CVE-2025-55182). Safe, non-exploitative, multi-target capable.
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
jan0x190/CVE-2025-55182-Simple-Scanner-main
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
Ngagne-Demba-Dia/CVE-2024-6387-corrigee
CVE-2024-6387HIGH08 Dec 2025
Openssh: regresshion - race condition in ssh allows rce/dos
63RISK
open ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 1
0xsj/CVE-2025-55182
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 1
Alat ini mendeteksi potensi kerentanan React2Shell (CVE-2025-55182) dalam proyek React dengan memeriksa: - File `package.json` dan file lock untuk paket rentan - Direktori `node_modules` untuk dependensi yang terpengaruh - URL secara pasif untuk deteksi jarak jauh
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 1
A lightweight, recursive Bash script to detect Next.js and React Server DOM versions vulnerable to CVE-2025-55182 (React2Shell) in local projects.
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC★ 2
VulnCheck CVE-2025-55182 react2shell
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
GitHub PoC
CVE-2025-55182 + CVE-2025-66478 - Next.js/React Server Components Remote Code Execution
CVE-2025-55182CRITICALunder attackransomware08 Dec 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISK
open ↗
← previouspage 380 / 2,963next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.