Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

71.836exploits catalogados
32.133CVEs con explotación pública
1932probados en laboratorio
13.264 exploits
GitHub PoC2
React2Shell Vulnerability
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Macaroniwdcheese/CVE-2025-55182-Lab
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Exploit for CVE-2025-55182 (React4Shell)
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
HUAHUAI23/CVE-2025-55182-POC
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
Alat ini mendeteksi potensi kerentanan React2Shell (CVE-2025-55182) dalam proyek React dengan memeriksa: - File `package.json` dan file lock untuk paket rentan - Direktori `node_modules` untuk dependensi yang terpengaruh - URL secara pasif untuk deteksi jarak jauh
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
CVE-2025-55182-scanner with 2 different method
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
jandelima/cve-2025-55182-poc-test
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC8
🔍 Next.js RCE Scanner (CVE-2025-55182) - Automated vulnerability scanner using Zoomeye search engine. Discovers targets via dorks and tests for CVE-2025-55182 with parallel scanning capabilities.
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
CVE-2025-55182 and CVE-2025-66478
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
CVE-2025-55182 React2Shell PoC
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC3
[React2Hell] Next.js/React Server RCE Exploit — CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
CVE-2025-55182 Next.js RCE Exploit Tool
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
CVE-2025-55182 and CVE-2025-66478
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
LQTjim/next-bug-CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Heuristic security scanner for detecting React Server Components (RSC) vulnerabilities, including React2Shell-style behavior (CVE-2025-55182). Safe, non-exploitative, multi-target capable.
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
jan0x190/CVE-2025-55182-Simple-Scanner-main
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC3
A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC2
VulnCheck CVE-2025-55182 react2shell
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
Scanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
Ngagne-Demba-Dia/CVE-2024-6387-corrigee
CVE-2024-6387HIGH08 dic 2025
Openssh: regresshion - race condition in ssh allows rce/dos
63RIESGO
abrir
GitHub PoC
rsp243/fix_nginx_CVE-2013-4547_IB
CVE-2013-454708 dic 2025
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescap
35RIESGO
abrir
GitHub PoC1
0xSalm0n/CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
Drupal vulnerable a CVE-2018-7600
CVE-2018-7600CRITICALbajo ataqueransomware08 dic 2025
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RIESGO
abrir
GitHub PoC3
A modern, user-friendly GUI application for detecting and exploiting the CVE-2025-55182 vulnerability in React Server Components. Built with Python and Tkinter, featuring a sleek neon-themed interface for scanning targets, executing shell commands, and viewing live console output.
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
gladiator-07/CVE-2022-0847
CVE-2022-0847HIGHbajo ataque08 dic 2025
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RIESGO
abrir
GitHub PoC1
A lightweight, recursive Bash script to detect Next.js and React Server DOM versions vulnerable to CVE-2025-55182 (React2Shell) in local projects.
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
thekamran/CVE-2025-55182-Proof-of-Concept
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
0xsj/CVE-2025-55182
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC1
CVE-2025-55182 PoC
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir
GitHub PoC
CVE-2025-55182 + CVE-2025-66478 - Next.js/React Server Components Remote Code Execution
CVE-2025-55182CRITICALbajo ataqueransomware08 dic 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RIESGO
abrir

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.