Skip to content

React

In 8 briefs, most recently 2 January 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Coverage in DanSec Daily

Fri 02 Jan RondoDox botnet exploits React2Shell to hijack IoT devices; GlassWorm pushes trojanized crypto wallets to macOS developers via malicious VSCode extensions.
Sat 13 Dec The Coupang breach (33.7M customers), Akira's Fieldtex claim, and the exploited Gladinet CentreStack and React2Shell (CVE-2025-55182) flaws.
Thu 11 Dec React2Shell exploitation, Gladinet CentreStack hard-coded key attacks, WinRAR CVE-2025-6218 abuse, and Fortinet auth bypass patches in this security news brief.
Tue 09 Dec Pear ransomware hits Tri-Century Eye Care; React2Shell and ICTBroadcast flaws exploited; malicious VS Code extensions found in Microsoft Marketplace.
Sun 07 Dec React2Shell RCE exploited in breaches at 30 organisations, Kohler smart toilet camera encryption flaws, and 30+ AI IDE vulnerabilities.
Sat 06 Dec Clop's Oracle E-Business Suite zero-day breach at Barts Health, active exploitation of the React2Shell flaw, and a record 29 Tbps Aisuru DDoS attack.
Fri 05 Dec Inotiv ransomware theft, Marquis breach affecting 780,000+, and React2Shell (CVE-2025-55182) exploitation by China-linked actors.
Thu 04 Dec Cloudflare's record 29.7 Tbps Aisuru botnet DDoS, the Oracle E-Business Suite Clop campaign hitting universities, and WordPress King Addons plugin takeovers.