638 matches found
Incomplete List of Disallowed Inputs
Overview @auth0/nextjs-auth0 is a Next.js SDK for signing in with Auth0 Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via improper validation of the returnTo parameter. An attacker can cause tokens to be issued with unintended parameters by injecting...
@smg-automotive/auth (>=6.8.0-auth0-update-access-token-endpoint.1, <=8.3.0-lschuerch-FED-782-sync-tenant.7) potentially affected by CVE-2025-67716 via @auth0/nextjs-auth0 (>=4.9.0, <=4.12.1)
@auth0/nextjs-auth0 NPM version =4.9.0, =6.8.0-auth0-update-access-token-endpoint.1, =8.3.0-lschuerch-FED-782-sync-tenant.7 Source cves: CVE-2025-67716 Source advisory: OSV:GHSA-MR6F-H57V-RPJ5...
GHSA-WCGJ-F865-C7J7 Improper Request Caching Lookup in the Auth0 Next.js SDK
Description When using affected versions of the Next.js SDK, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. Am I Affected? You are affected if you meet the following preconditions: - Applications using the auth0/nextjs-aut...
Incorrect Authorization
Overview @auth0/nextjs-auth0 is a Next.js SDK for signing in with Auth0 Affected versions of this package are vulnerable to Incorrect Authorization via improper lookups in TokenRequestCache. An attacker can access sensitive information belonging to other users by making simultaneous requests on t...
Exploit for Improper Authorization in Vercel Next.Js
Next.js RCE Scanner Scanner for CVE-2025-29927 - Next.js/...
Exploit for Deserialization of Untrusted Data in Facebook React
🚀 React2Shell Exploiter Advanced Exploitation & Server I...
NextJS-Auth0 security vulnerability
nextjs-auth0 is an Auth0 open source Next.js SDK for logging in using Auth0. A security vulnerability exists in nextjs-auth0 versions 4.11.0 through 4.11.2 and 4.12.0, which stems from the fact that simultaneous requests on the same client may result in improper lookups in TokenRequestCache...
PT-2025-50552
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in...
PT-2025-50563
Name of the Vulnerable Software and Affected Versions Auth0 Next.js SDK versions 4.9.0 through 4.12.1 Description The Auth0 Next.js SDK has an input-validation issue in the returnTo parameter. This flaw allows attackers to inject unintended OAuth query parameters into the Auth0 authorization...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — demo This repository provides a demonstratio...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell A scanner for detecting and exploiting Next.js...
Exploit for CVE-2025-66478
monorepo-nextjs-npm-nested-versions - VULNERABLE CVE-2025-664...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Next.js RCE Exploit Tool 中文文档./README.zh-CN...
Exploit for CVE-2025-66478
CVE-2025-66478 – Next.js Server Actions RCE Vulnerability: Ana...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Scanner Simple command-line tool for detecting...
Exploit for Deserialization of Untrusted Data in Facebook React
Parameters - -f: File to scan default: urls.txt - -f...
Exploit for Deserialization of Untrusted Data in Facebook React
NextRce - Next.js RSC Exploit Tool CVE-2025-55182...
Exploit for Deserialization of Untrusted Data in Facebook React
Vulnerable Next.js RSC Application - CVE-2025-55182 ⚠️ WARN...