YARA rules tagged CVE_2025_55182
5 rules carry the tag “CVE_2025_55182”.
Detects RCE indicators related to the proof-of-concept code for the React Server Remote Code Execution Vulnerability (CVE-2025-55182)
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2025-12-05Detects in-memory webshell indicators related to the proof-of-concept code for the React Server Remote Code Execution Vulnerability (CVE-2025-55182)
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2025-12-05Detects RCE indicators related to the proof-of-concept code for the React Server Remote Code Execution Vulnerability (CVE-2025-55182) but could be used in other JavaScript based PoC code as well
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2025-12-05Detects RCE indicators related to the proof-of-concept code for the React Server Remote Code Execution Vulnerability (CVE-2025-55182) as used in the RSC Detector browser extension but could be used in other JavaScript based PoC code as well
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2025-12-06Detects error messages caused by the exploitation of the React Server Remote Code Execution Vulnerability (CVE-2025-55182) in Next.js applications (CVE-2025-66478). This can also be caused by vulnerability scanning.
ExploitSignature Base (Florian Roth / Nextron)· Florian Roth· 2025-12-05