4 ms·

Is there some sort of example exploit somewhere?

• darig 10mo ago
  [dead]
• cowsandmilk 10mo ago
  https://github.com/ejpir/CVE-2025-55182-poc https://github.com/ejpir/CVE-2025-55182-poc
  • cluckindan 10mo ago
    I will believe it works when it is demonstrated against a create-next-app project.
  • Tomuus 10mo ago
    This POC is not realistic and doesn't work against production builds of Next.js. It requires explicit exposure of gadgets by the user (eg. vm.runInContext) so is invalid as noted on https://react2shell.com https://react2shell.com
  • slop-cop 10mo ago
    The guy who discovered the actual vulnerability says otherwise. Delete this distraction to genuine blue teamers and stop shitting up the information landscape with this utter hogwash. This is why infosec is dead. https://react2shell.com/ https://react2shell.com/ https://github.com/ejpir/CVE-2025-55182-poc/issues/1#issuecomment-3609929967 https://github.com/ejpir/CVE-2025-55182-poc/issues/1#issueco...