CVE-2025-55182-PoC

CVE-2025-55182 - PoC 및 Stand 📌 빠른 시작 1. 취약한 Stand 배포 cd Stand docker compose up --build 취약한 앱은 다음에서 실행됩니다: http://localhost:3011 2. 안전한 PoC 스캐너 실행 bash cd PoC/src poetry install poetry run python scanner.py http://localhost:3011 ✅ 예상 PoC 출력 text Scanning target: http://localhost:3011 + VULNERABLE...

CVE-2026-84856

rowboatlabs rowboat versions up to 0.9.1 are affected by a denial of service vulnerability in the Composio Webhook Endpoint (apps/rowboat/app/api/composio/webhook/route.ts), specifically in the request.text/req.json function. The attack is remotely exploitable with no authentication required. A p...

CVE-2025-46344 Auth0 NextJS SDK v4 Missing Session Invalidation

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke .setExpirationTime when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While...