BestHub
Sign in
Black & White Path
Black & White Path
Apr 28, 2026 · Information Security

Hackers Exploit React2Shell via Telegram Bot, Breaching Over 900 Companies

A publicly exposed server revealed a large‑scale automated attack in which threat actors used the Bissa scanner tool, AI‑assisted code, and hard‑coded Telegram bots to exploit the React2Shell (CVE‑2025‑55182) vulnerability, stealing credentials from more than 900 enterprises and reporting each success in real time.

AutomationBissa scannerCVE-2025-55182
0 likes · 7 min read
Hackers Exploit React2Shell via Telegram Bot, Breaching Over 900 Companies
Black & White Path
Black & White Path
Apr 13, 2026 · Information Security

How React Server Functions Enable Prototype Pollution RCE (CVE‑2025‑55182)

The article examines CVE‑2025‑55182, a critical prototype‑pollution vulnerability in React Server Functions that allows remote code execution in frameworks like Next.js, detailing the JSON payload injection using __proto__ or constructor.prototype, the serialization flaw, and the resulting impact on Node.js environments.

CVE-2025-55182Information SecurityNext.js
0 likes · 2 min read
How React Server Functions Enable Prototype Pollution RCE (CVE‑2025‑55182)
Black & White Path
Black & White Path
Apr 12, 2026 · Information Security

How Prototype Pollution in React Server Functions Enables Remote Code Execution (CVE‑2025‑55182)

The article analyzes the critical CVE‑2025‑55182 vulnerability affecting React Server Functions in Next.js, detailing how prototype‑pollution during serialization between server components and the client runtime allows attackers to inject __proto__ or constructor.prototype payloads and achieve remote code execution.

CVE-2025-55182Next.jsPrototype Pollution
0 likes · 2 min read
How Prototype Pollution in React Server Functions Enables Remote Code Execution (CVE‑2025‑55182)