Insertion of Sensitive Information Into Sent Data

Overview next is a react framework. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in action-handler.ts and action-utils.ts. An attacker can enumerate internal Server Action IDs by sending crafted Next-Action requests or probing client-served...

Next.js 代码问题漏洞

Next.js is a React framework open source by Vercel. Versions of Next.js from 13.4.13 to 15.5.16, as well as versions before 16.2.5, have code vulnerabilities. These vulnerabilities stem from the use of the built-in Node.js server for hosting. When a custom WebSocket upgrade request is made, it ma...

PT-1990-1007 · Next · Next

Name of the Vulnerable Software and Affected Versions: NeXT versions 1.0a through 1.0 Description: A local user can gain root privileges due to an issue in the restore0.9 installation script. Recommendations: For NeXT versions 1.0a through 1.0, at the moment, there is no information about a newer...

PT-1990-1006 · Next · Next

Name of the Vulnerable Software and Affected Versions: NeXT versions 1.0a and 1.0 Description: The issue allows local users to gain privileges through a combination of the npd program and weak directory permissions, specifically when printers are publicly accessible. Recommendations: For NeXT...