eynaexp/cve-2025-55182-pocPoc for CVE-2025-55182 (remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages)
Full Proof-of-Concept With Real Command Output
This repository contains a Python-based proof-of-concept (PoC) scanner for CVE-2025-55182, demonstrating how an attacker could exploit a command injection vulnerability through a JSON-based POST request.
The tool allows security researchers and penetration testers to verify whether a target is vulnerable by sending a command and retrieving its execution output.
This project is provided strictly for educational, research, and authorized penetration testing purposes only.
You are fully responsible for complying with all applicable laws.
Do NOT use this tool against systems you do not own or do not have explicit permission to test.
The author assumes no liability for any misuse or damage caused.
SHODAN: http.component:"react"
FOFA: app="React.js"
requests library#Clone the Repo:
git clone https://github.com/EynaExp/CVE-2025-55182-POC
#Change to Directory:
cd CVE-2025-55182-POC
#Install dependencies:
pip install requests
#Run poc.py:
#Windows:
python poc.py [-h]
#Linux:
python3 poc.py [-h]
███████╗██╗ ██╗███╗ ██╗ █████╗ ███████╗██╗ ██╗██████╗
██╔════╝╚██╗ ██╔╝████╗ ██║██╔══██╗██╔════╝╚██╗██╔╝██╔══██╗
██║ ╚████╔╝ ██╔██╗ ██║███████║█████╗ ╚███╔╝ ██████╔╝
██║ ╚██╔╝ ██║╚██╗██║██╔══██║██╔══╝ ██╔██╗ ██╔═══╝
╚███████╗ ██║ ██║ ╚████║██║ ██║███████╗██╔╝ ██╗██║
╚══════╝ ╚═╝ ╚═╝ ╚═══╝╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝╚═╝
CVE-2025-55182 Proof of Concept
GitHub: https://github.com/EynaExp
Disclaimer:
This tool is released for EDUCATIONAL and AUTHORIZED TESTING purposes only.
The author is not responsible for any misuse or damage caused by this program.
[+]APP USAGE :
[-d] <DNS(without http/s)>
[-l] <Targets file path(url wordlist)>
[-C] <Command>
🧪 Educational Purpose This repository exists to help researchers understand:
How command injection vulnerabilities function
How to build safe, controlled exploitation PoCs
How to responsibly validate systems during security assessments
If you use or modify this PoC for research, please credit the original author.