506 matches found
Exploit for CVE-2025-55182
CVE-2025-55182 This repository provides a minimal intentional...
Exploit for CVE-2025-55182
CVE-2025-55182 - Dockerized Proof of Concept This repository...
Exploit for CVE-2025-66478
Check for CVE-2025-66478 Checks if your NextJS server is vulne...
Exploit for CVE-2025-55182
CVE-2025-55182-shellinteractive Base used from: https://gith...
Exploit for CVE-2025-55182
CVE-2025-55182 POC for Next.js App-Router CVE-2025-55182 POC...
Exploit for CVE-2025-66478
Next.js RSC RCE Scanner CVE-2025-66478 A command-line scann...
Exploit for CVE-2025-55182
react2shell-scanner A command-line tool for detecting CVE-202...
Exploit for CVE-2025-55182
CVE-2025-55182 Proof-of-concept exploit for CVE-2025-55182, a...
@aandyw/ybf (>=0.1.0, <=0.1.29), @accounter/client (>=0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, <=0.0.5-alpha-20250410150030-25fea893fb3523b55c835620f6692430d5bc9bee) +211 more potentially affected by CVE-2025-55182 +1 more via next (>=15.2.0, <=15.2.5)
next NPM version =15.2.0, =0.1.0, =0.0.4-alpha-20250227014300-bbaee6f285ce9d54b581b115d444233911983665, =0.0.1-alpha, =0.1.0, =3.2.0, =0.1.0, =1.1.0-canary.0, =1.1.0-canary.0, =1.2.0-canary.0, =1.2.2-canary-20250514183211, =1.2.0-canary.8, =1.6.0 and more Source cves: CVE-2025-55182, CVE-2025-664...
PT-2025-48971
Name of the Vulnerable Software and Affected Versions react-server-dom-webpack affected versions not specified react-server-dom-parcel affected versions not specified react-server-dom-turbopack affected versions not specified Next.js versions prior to 16.0.7 Description A deserialization flaw...
Next.js Framework React Server Components Remote Code Execution (CVE-2025-55182)
The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel,...
Exploit for Improper Authorization in Vercel Next.Js
📦 Next.js CVE-2025-29927 - Proof of Concept This repository c...
Exploit for Race Condition in Vercel Next.Js
CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC La...
Insertion of Sensitive Information Into Sent Data
Overview @sentry/nextjs is an Official Sentry SDK for Next.js Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication cookies, b...
Malicious code in @posthog/nextjs-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-198939
Malicious code in @posthog/nextjs npm...
MAL-2025-190887 Malicious code in @posthog/nextjs-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...
MAL-2025-190886 Malicious code in @posthog/nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eae844852de94f0a7cd6826f344e60fe40945cdacfaa3d3d589c965ade4ad1 The package @posthog/nextjs was found to contain malicious code. Source: google-open-source-security...
Malicious code in @posthog/nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eae844852de94f0a7cd6826f344e60fe40945cdacfaa3d3d589c965ade4ad1 The package @posthog/nextjs was found to contain malicious code. Source: google-open-source-security...