CVE-2025-55182-PoC

CVE-2025-55182 - PoC & Stand 📌 Quick Start 1. Deploy Vulnerable Stand root@kitploit: cd Stand docker compose up --build The vulnerable app runs at: http://localhost:3011 2. Run the Safe PoC Scanner bash cd PoC/src poetry install poetry run python scanner.py http://localhost:3011 ✅ Expected PoC...

CVE-2026-84856

rowboatlabs rowboat versions up to 0.9.1 are affected by a denial of service vulnerability in the Composio Webhook Endpoint (apps/rowboat/app/api/composio/webhook/route.ts), specifically in the request.text/req.json function. The attack is remotely exploitable with no authentication required. A p...

CVE-2025-46344 Auth0 NextJS SDK v4 Missing Session Invalidation

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke .setExpirationTime when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While...