3 ms·
https://github.com/ejpir/CVE-2025-55182-poc https://github.com/ejpir/CVE-2025-55182-poc
by cowsandmilk 11mo ago
https://github.com/ejpir/CVE-2025-55182-poc https://github.com/ejpir/CVE-2025-55182-poc
- cluckindan 11mo agoI will believe it works when it is demonstrated against a create-next-app project.
- Tomuus 11mo agoThis POC is not realistic and doesn't work against production builds of Next.js. It requires explicit exposure of gadgets by the user (eg. vm.runInContext) so is invalid as noted on https://react2shell.com https://react2shell.com
- slop-cop 11mo agoThe guy who discovered the actual vulnerability says otherwise. Delete this distraction to genuine blue teamers and stop shitting up the information landscape with this utter hogwash. This is why infosec is dead. https://react2shell.com/ https://react2shell.com/ https://github.com/ejpir/CVE-2025-55182-poc/issues/1#issuecomment-3609929967 https://github.com/ejpir/CVE-2025-55182-poc/issues/1#issueco...