Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.064exploits catalogados
37.667CVEs con explotación pública
24.695probados en laboratorio
80.930 exploits
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC2
sudo-Yangziran/CVE-2025-55182POC
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Unified Security Research Tool
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC23
Burp Suite extension to detect the Next.js / React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Vulnerable REACT app in docker container and poc code - for demos
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only.
CVE-2025-13486CRITICAL04 dic 2025
Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form
75RIESGO
abrir
GitHub PoC3
检测针对 CVE-2025-55182(React 服务器组件远程代码执行漏洞)的扫描器
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
infoleak
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC3
A proof of concept exploit script for CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC58
Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm/pnpm/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
0xPThree/cve-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
A proof of concept of remote code execution
CVE-2025-48384HIGHbajo ataque04 dic 2025
Git allows arbitrary code execution through broken config quoting
71RIESGO
abrir
GitHub PoC1
Poc for CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
clevernyyyy/CVE-2025-55182-Dockerized
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
klassiker/CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC59
Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC92
React2Shell Proof of Concept
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
zr0n/CVE-2025-48384-sub
CVE-2025-48384HIGHbajo ataque04 dic 2025
Git allows arbitrary code execution through broken config quoting
71RIESGO
abrir
GitHub PoC
a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic "Lab Environment" to safely test and understand the vulnerability.
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC3
RCE Auto exploit for CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Functional Python POC to test if servers are vulnerable to CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC117
Next.js-Exploit-Tool 图形化综合利用工具,基于 Go 开发,一款针对 CVE-2025-55182 的独立安全评估工具。
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC7
Deliberately vulnerable banking app for CVE-2025-55182 (React) and CVE-2025-66478 (Next.js) to learn, detect, and safely exercise React2Shell. Runs unpatched React 19.0.0 and Next.js 15.0.3.
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
CVE-2025-55182 漏洞利用GUI,PoC / Exploit for CVE-2025-55182 & CVE-2025-66478
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
VulnCheck XDB
initial-access
CVE-2025-13486CRITICAL04 dic 2025
Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form
75RIESGO
abrir
GitHub PoC21
MrR0b0t19/CVE-2025-55182-shellinteractive
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC2
React2Shell Scanner (CVE-2025-55182 & CVE-2025-66478)
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
dissy123/cve-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware04 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
anteriorpágina 245 / 2698siguiente

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.