Why “RCE in React” Still Happens

What is XXE — and why React folks should care

When we think of security, backend systems usually take the spotlight encrypted databases, firewalls, token validation. But in reality, the…

Promises, async/await, and what to scan inside JavaScript files

Promises, async/await, and what to scan inside JavaScript files

Learning code splitting, lazy loading, and exposed source maps from a Bug Hunter Perspective!

Modern JavaScript frameworks are evolving fast, but so are the ways they break. Two new high-impact vulnerabilities — CVE-2025–55182 and…

CVE-2025–55182 exposes a subtle React flaw that turns UI state into an attack surface. Here’s what to know.

Hi, Myself Abhishek Gupta. I am going to tell you about how you can find this vulnerability and what steps to follow to exploit it.

Here’s how I discovered Pre Auth RCE in live targets using React2Shell Vulnerability. Poc Script, Exploit Requests and Bypass Included.

Remember when you thought your React app with that sweet Server-Side Rendering was secure? Yeah, about that…

Most of us trust popular tools like React without thinking twice. It’s everywhere — from small personal projects to huge apps used by…

Everything you need to know about CVE-2025–55182 — how it works, who’s exploiting it, and what you must do right now

A Developer’s Deep Dive into Unauthenticated Remote Code Execution

What is React2Shell Vulnerability? This vulnerability affects React Server Components (RSC) and the frameworks that implement them…

In December 2025, security researchers disclosed one of the most critical vulnerabilities ever discovered in the React ecosystem…

One exposed token in a browser gives attackers everything they need to walk through your backend.

One wrong origin setting can turn a private API into a public one without you noticing.

I recently downloaded an entire enterprise web application’s proprietary source code, complete with hidden backend routing, candid…

An attack which shook the software industry!!!