4333 matches found
Exploit for Use After Free in Linux Linux_Kernel
Root My Galaxy Payloads — Galaxy S25 Ultra SM-S938N This re...
Exploit for Use After Free in Linux Linux_Kernel
Root My Galaxy Payloads — Galaxy S25 Ultra SM-S938N This re...
9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1127 more potentially affected by CVE-2026-94483 via next (>=16.0.0, <=16.3.7)
next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-94483 Source advisory:...
Server-side Request Forgery (SSRF)
Overview next is a react framework. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the Image Optimization remote fetch, which resolves and requests an allowlisted remote URL without constraining the address that name resolves to, so a host permitted by...
Exploit for CVE-2026-94545
CVE-2026-94545: Next.js next/og Unauthenticated Remote Code...
NPM: Next.js: Remote Code Execution in next/og ImageResponse
NPM: Next.js: Remote Code Execution in next/og ImageResponse vulnerability discovered by ? in WordPress Npm next versions = 16.2.0, 16.3.6...
Next.js: Remote Code Execution in next/og ImageResponse
Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...
@10xdevs/term (0.1.0), @10xdevs/voice-sdk (0.1.0) +640 more potentially affected by CVE-2026-94545 via next (>=16.2.0, <=16.3.5)
next NPM version =16.2.0, =0.3.5, =1.0.0, =0.2.1, =0.2.0, =0.1.3, =2.0.4, =0.1.0, =1.0.12, =1.0.12, =1.0.12, =1.0.12, =1.0.21 and more Source cves: CVE-2026-94545 Source advisory: OSV:GHSA-VCVR-R3JV-PC5J...
GHSA-VCVR-R3JV-PC5J Next.js: Remote Code Execution in next/og ImageResponse
Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...
Exploit for CVE-2026-94545
CVE-2026-94545: Next.js next/og allows unauthorized remote c...
CVE-2026-51867: Undefined Security Weakness
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
CVE-2026-51867
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
CVE-2026-51867
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
EUVD-2026-90415
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
CVE-2026-51867
The software agentgpt v.1.0.0 is vulnerable to Incorrect Access Control within the next/src/server/api/routers/agentRouter.ts component. The issue stems from an externally reachable path that accepts a caller-selected object or tenant identifier, allowing it to perform data-access operations with...
PT-2026-105541
Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...
PT-2026-103616
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
Exploit for CVE-2026-94545
CVE-2026-94545 Next.js next/og Unauthenticated RCE ★ CVE-2026...