Top Tweets for #React2Shell
2. React2Shell
A critical React Server Components vulnerability, CVE-2025-55182, was disclosed in December 2025.
It received a CVSS score of 10.0.
Lesson: Even modern frameworks like React and Next.js need security updates.
#reactjs #react #React2Shell
🚨Threat Actor 169[.]58.82.229🚨
CobaltStrike and Log4jHorizon,rogue-jndi,react2shell,chisel
- ad3lplo@vmi3468959
- mohammedalmahkti77
- ahmedahmed6810
- a24164015
Analyze it yourself, free: https://t.co/nsceT9CPU3
#cobaltstrike #threatactor #malware #log4j #react2shell
![etugenio's tweet photo. 🚨Threat Actor 169[.]58.82.229🚨
CobaltStrike and Log4jHorizon,rogue-jndi,react2shell,chisel
- ad3lplo@vmi3468959
- mohammedalmahkti77
- ahmedahmed6810
- a24164015
Analyze it yourself, free: https://t.co/nsceT9CPU3
#cobaltstrike #threatactor #malware #log4j #react2shell https://t.co/4yJg06nFBw](https://pbs.twimg.com/media/HPa37B3WgAAqzeG.jpg)
Released my first blog "Debugging React2Shell (CVE-2025-55182)".
In this blog, I have analysed and explained the backend source code of React which caused the React2Shell vulnerability.
https://t.co/68ZmsASPfb
#cybersecurity #pentesting #react2shell
Dr. Tube’s AI-assisted Bissa scanner exploited 900+ companies using React2Shell (CVE-2025-55182) to steal 30,000 .env files. See the AI-led attack workflow.
#AICyberAttack #BissaScanner #React2Shell #InfoSec #CyberSecurity #CloudSecurity #DrTube
https://t.co/3HmFuBFogI

The 72-Hour Siege: Analyzing the March 2026 Industrialized Cyber Offensive
Newsletter: https://t.co/n498RkKNVn
Website: https://t.co/yFF81iGEtm
#NextJS #React2Shell #RCE #KimovaAI #InfoSec #Cybersecurity #DieNet #ThreatIntelligence #TurboAudit #DDoS #Hactivism #ISO27001 #ISO

Hackers Exploit React2Shell to Hijack Web Traffic via Compromised NGINX Servers https://t.co/dHxYPQFcHg #Cybersecurity #Hacking #NGINX #React2Shell #WebTraffic

Ctrl-Alt-Intel exposes a suspected DPRK campaign using an 'Amazon Kill Chain' and React2Shell to systematically breach crypto exchanges and steal code.
#AWSKillChain #React2Shell #CyberSecurity #Crypto #DPRKHackers #CloudSecurity #InfoSec #Kubernetes
https://t.co/Sn3y40xL9F
"Investigating Suspected DPRK-Linked Crypto Intrusions" published by CtrlAltIntel. #React2Shell, #DPRK, #CTI https://t.co/hxOJiumpwd
React2Shell脆弱性が実際に悪用され、細工リクエストでRCE成立→Webシェル設置やマイナー展開が確認。公開Webアプリが標的。即時パッチ適用とWAF監視が重要。 #React2Shell #RCE #CyberSecurity https://t.co/SrxXePdhsd
TeamPCP Worm Abuses Cloud To Build Botnets
Read More: https://t.co/ZmAbdGXRGJ
#TeamPCP #CloudBotnet #React2Shell #DockerSecurity #KubernetesSecurity #CloudExploitation #CryptoMiningMalware #ThreatResearch

كشفت البيانات التقنية الحديثة عن حملة منظمة تستهدف إعادة توجيه حركة مرور الويب من خلال التلاعب بملفات تهيئة خوادم NGINX. يعتمد هذا النشاط على استغلال ثغرة "React2Shell" المصنفة بدرجة خطورة قصوى.
📌 التفاصيل الكاملة:
🔗: https://t.co/gd4zeKzlAI
#NGINX #React2Shell

有黑客利用 #React2Shell 漏洞入侵宝塔面板和 NGINX 服务器,通过篡改网站配置文件将流量跳转到非法博彩平台。此次攻击黑客目标是印度、印尼、泰国、孟加拉的网站,黑客篡改配置文件直接将流量转到黑客控制的服务器,然后通过更精密的流量控制将部分访问跳转到非法博彩网站:https://t.co/0K7SIfaozX

Returning to the #React2Shell case, we can note a consistently high level of malicious activity in the field of exploitation. According to recent data from GreyNoise, more than 1.4 million attempts were recorded over the last week.
https://t.co/RvHrExguG9
@three_cube @_aircorridor @DI0256

Got hit by “React2Shell” but basic Unix user isolation contained it. I break down this incident and the simple hardening that saved the server. If you run Next.js, give this a read.
URL: https://t.co/cBHgxZBinA
#React2Shell #NextJS #Security #Linux #DevOps
Check out @hrbrmstr today on @HuntressLabs Tradecraft Tuesday at 1pm ET to chat about all things #React2Shell. 🤘
🔗 https://t.co/wPbc7Hohj0

No te pierdas nuestro primer workshop del año, donde nos pondremos a jugar con bypasses de WAF y react2shell . #HackerOne #react2shell #Mexico registro en: https://t.co/Wdqw2tln63
La importancia de hacer mantenimiento en nuestras webs para evitar que un atacante explote vulnerabilidades que aparecen con el tiempo. #ciberseguridad #react2shell #hackingetico #ciberseguridad
🚨 New Writeup Alert! 🚨
" React2Shell (CVE-2025–55182) — From React Server Components to Full RCE" by Aditya Bhatt is now live on IW!
Check it out here: https://t.co/4JgKzEL6Dz
#react2shell #thm #ctf #cybersecurity #react
React2ShellはReact Server Components起因のRCE。フロント入力が直接サーバ実行に到達し、Webシェル設置も可能。既に実環境で悪用観測。RSC有効アプリは設計見直しと即対策が必須。#React #React2Shell #RCE https://t.co/mKeKgOa9Nt
CVE-2025-54068 is the #React2Shell of the Laravel world.🚩
Just like Next.js Server Actions, Livewire bridges the frontend/backend gap automatically. But blindly deserializing state from the client? That leads to RCE.
👇Try the exploit via Vulhub: https://t.co/dWjH6HTcif
#Vulhub

Last Seen Hashtags on Sotwe
Most Popular Users

Elon Musk 
@elonmusk
241.5M followers

Barack Obama 
@barackobama
118.8M followers

Cristiano Ronaldo 
@cristiano
114.5M followers

Donald J. Trump 
@realdonaldtrump
111.8M followers

Narendra Modi 
@narendramodi
107.1M followers

Rihanna 
@rihanna
98.7M followers

NASA 
@nasa
92.3M followers

Justin Bieber 
@justinbieber
91.8M followers

KATY PERRY 
@katyperry
90M followers

Taylor Swift 
@taylorswift13
84M followers

Lady Gaga 
@ladygaga
75.5M followers

Virat Kohli 
@imvkohli
73.5M followers

Kim Kardashian 
@kimkardashian
70.9M followers

YouTube 
@youtube
68.8M followers

Neymar Jr 
@neymarjr
66.5M followers

Bill Gates 
@billgates
65.3M followers

Selena Gomez 
@selenagomez
63.1M followers

The Ellen Show
@theellenshow
62.2M followers

CNN 
@cnn
61.7M followers

X 
@x
60.7M followers


![etugenio's tweet photo. 🚨Threat Actor 169[.]58.82.229🚨
CobaltStrike and Log4jHorizon,rogue-jndi,react2shell,chisel
- ad3lplo@vmi3468959
- mohammedalmahkti77
- ahmedahmed6810
- a24164015
Analyze it yourself, free: https://t.co/nsceT9CPU3
#cobaltstrike #threatactor #malware #log4j #react2shell https://t.co/4yJg06nFBw](https://pbs.twimg.com/media/HPa3J3PXIAAn_9b.jpg)
![etugenio's tweet photo. 🚨Threat Actor 169[.]58.82.229🚨
CobaltStrike and Log4jHorizon,rogue-jndi,react2shell,chisel
- ad3lplo@vmi3468959
- mohammedalmahkti77
- ahmedahmed6810
- a24164015
Analyze it yourself, free: https://t.co/nsceT9CPU3
#cobaltstrike #threatactor #malware #log4j #react2shell https://t.co/4yJg06nFBw](https://pbs.twimg.com/media/HPa2Iu2WgAAG75H.jpg)
















