Research 3 React2Shell: RCE com CVSS 10.0 no Next.js Dec 26, 2025 CVE-2025-66224: escrita de arquivo no OrangeHRM (PoC) Dec 17, 2025 CVE-2025-63406: RCE no Group Office via eval() (PoC) Nov 21, 2025