⤷ Title: The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #China Espionage #cloud security #CVE_2025_55182 #cybersecurity #Google Threat Intelligence #Next.js #RCE #React Server Components #React2Shell
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:22:02 +0000
════════════════════════
⌗ Tags: #Vulnerability #China Espionage #cloud security #CVE_2025_55182 #cybersecurity #Google Threat Intelligence #Next.js #RCE #React Server Components #React2Shell
Penetration Testing Tools
The Next Log4Shell? Global Hackers Weaponize React2Shell for RCE and Cloud Takeovers
A critical vulnerability in the widely used JavaScript library React, dubbed React2Shell, is already being exploited at scale.
⤷ Title: React2Shell: The Critical Vulnerability That Shook the JavaScript World
════════════════════════
𐀪 Author: Aditya Kumar Tiwari
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 19:01:11 GMT
════════════════════════
⌗ Tags: #react2shell #nextjs #hacking #vulnerability #reactjs
════════════════════════
𐀪 Author: Aditya Kumar Tiwari
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 19:01:11 GMT
════════════════════════
⌗ Tags: #react2shell #nextjs #hacking #vulnerability #reactjs
Medium
React2Shell: The Critical Vulnerability That Shook the JavaScript World
Everything you need to know about CVE-2025–55182 — how it works, who’s exploiting it, and what you must do right now
⤷ Title: Beyond the Shell: Critical React2Shell Exploit Hits Japan to Deploy Stealthy ZnDoor RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 02:45:54 +0000
════════════════════════
⌗ Tags: #Malware #anti_forensics #CVE_2025_55182 #Japan Cyber Attacks #malware analysis #Next.js #NTT Security #RCE #React2Shell #threat intelligence #ZnDoor
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Dec 2025 02:45:54 +0000
════════════════════════
⌗ Tags: #Malware #anti_forensics #CVE_2025_55182 #Japan Cyber Attacks #malware analysis #Next.js #NTT Security #RCE #React2Shell #threat intelligence #ZnDoor
Penetration Testing Tools
Beyond the Shell: Critical React2Shell Exploit Hits Japan to Deploy Stealthy ZnDoor RAT
Since early December 2025, SOC teams in Japan have been observing a wave of attacks exploiting React2Shell (CVE-2025-55182)—a
⤷ Title: The Anatomy of React2Shell: Understanding the CVE-2025–55182 Critical RCE
════════════════════════
𐀪 Author: SecureSlate
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 08:49:00 GMT
════════════════════════
⌗ Tags: #cve #react2shell #rce_vulnerability #cybersecurity #anatomy
════════════════════════
𐀪 Author: SecureSlate
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 08:49:00 GMT
════════════════════════
⌗ Tags: #cve #react2shell #rce_vulnerability #cybersecurity #anatomy
Medium
The Anatomy of React2Shell: Understanding the CVE-2025–55182 Critical RCE
The Flaw That Gives Hackers Your Server Keys
⤷ Title: “React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:21:31 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain C2 #Cryptocurrency Theft #CVE_2025_55182 #cyber_espionage #Ethereum #EtherRAT #Node.js #React2Shell #Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:21:31 +0000
════════════════════════
⌗ Tags: #Malware #ASEC #Blockchain C2 #Cryptocurrency Theft #CVE_2025_55182 #cyber_espionage #Ethereum #EtherRAT #Node.js #React2Shell #Remote Code Execution
Daily CyberSecurity
“React2Shell” Exploited: New EtherRAT Malware Hunts for Crypto via Node.js
A new, sophisticated malware campaign is sweeping across the internet, leveraging a recently disclosed vulnerability to install cryptocurrency-stealing software on unsuspecting servers. The AhnLab…
⤷ Title: Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:11:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Beelzebub Research #botnet #Cloud Security #CVE_2025_29927 #CVE_2025_55182 #cyber_espionage #data exfiltration #Next.js #PCPcat #rce #React #React2Shell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:11:28 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Beelzebub Research #botnet #Cloud Security #CVE_2025_29927 #CVE_2025_55182 #cyber_espionage #data exfiltration #Next.js #PCPcat #rce #React #React2Shell
Daily CyberSecurity
Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours
A highly automated and ruthlessly efficient cyber-espionage campaign is tearing through the cloud infrastructure of modern web applications, leaving tens of thousands of compromised servers in its…
⤷ Title: React2Shell — React Server Components RCE CVE-2025–55182
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 09:09:16 GMT
════════════════════════
⌗ Tags: #react2shell_vulnerability #poc #cve_2025_55182 #react2shell #rce
════════════════════════
𐀪 Author: Zabed Ullah Poyel
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 09:09:16 GMT
════════════════════════
⌗ Tags: #react2shell_vulnerability #poc #cve_2025_55182 #react2shell #rce
Medium
React2Shell — React Server Components RCE CVE-2025–55182
Summary
⤷ Title: “RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 31 Dec 2025 02:33:19 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CloudSEK #CVE_2025_55182 #IoT security #Next.js #Prototype Pollution #rce #React2Shell #RondoDox #Server Actions #Web Framework Security #XMRig
Daily CyberSecurity
“RondoDoX” Strikes Back: Exposed Logs Reveal Massive 9-Month Campaign Targeting Next.js and IoT
The RondoDoX botnet has resurfaced with a potent new arsenal, shifting its sights from simple routers to enterprise-grade web frameworks. A new intelligence report from CloudSEK details a sprawlin…
⤷ Title: RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 03 Jan 2026 14:59:09 +0000
════════════════════════
⌗ Tags: #Security #Botnet #Cyber Attack #Cybersecurity #Malware #Mirai #Next.js #React2Shell #RondoDox #Vulnerability
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 03 Jan 2026 14:59:09 +0000
════════════════════════
⌗ Tags: #Security #Botnet #Cyber Attack #Cybersecurity #Malware #Mirai #Next.js #React2Shell #RondoDox #Vulnerability
Hackread
RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: “Sliver” in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Bangladesh #Bangladesh Airforce #c0baltstrik3d #CVE_2025_55182 #cyber_espionage #Edge Security #Fast Reverse Proxy #FortiWeb #FRP #Pakistan #React2Shell #Sliver C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability Report #Bangladesh #Bangladesh Airforce #c0baltstrik3d #CVE_2025_55182 #cyber_espionage #Edge Security #Fast Reverse Proxy #FortiWeb #FRP #Pakistan #React2Shell #Sliver C2
Daily CyberSecurity
"Sliver" in the Stack: Exposed Logs Reveal Targeted FortiWeb Exploitation Campaign
Threat actor uses React2Shell to deploy Sliver C2 on FortiWeb devices, using a Bangladesh Airforce decoy to target govt and financial sectors.