Search: “Next.js”

23 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 11 Exploit / PoC 7 Threat actor 4 Malware 4 Ransomware 3 Policy & legal 1 Phishing & fraud 1 Data breach 1 Tools 1

SeverityAll critical 23 high 8 medium 1 low 0 info 1

Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)

Help Net SecurityApr 2, 08:44 UTC · Apr 2, 2025Vulnerability in the wildCVE-2025-29927

60

Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors

Recorded FutureDec 9, 00:00 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-55182

60

December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat Activity

Recorded FutureJan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182 CVE-2025-20393 CVE-2025-8110+1 CVEs

60

Attackers hit React defect as researchers quibble over proof

CyberScoopDec 6, 17:14 UTC · Dec 6, 2025Ransomware in the wildCVE-2025-55182 CVE-2025-66478

60

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

The Hacker NewsDec 9, 06:18 UTC · Dec 9, 2025Exploit / PoC in the wildCVE-2025-55182

60

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs1

60

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-55182 CVE-2021-44228

60

Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims

CyberScoopDec 11, 17:17 UTC · Dec 11, 2025Ransomware in the wildCVE-2025-55182

60

Developers scramble as critical React flaw threatens major apps

CyberScoopDec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-66478

60

The democratisation of business email compromise fraud

Cisco TalosApr 2, 18:02 UTC · Apr 2, 2026Phishing & fraud in the wildCVE-2025-55182

60

Chinese Threat Actors Weaponize New Vulnerabilities in Under a Day

Infosecurity MagazineAug 3, 15:00 UTC · Aug 3, 2026Vulnerability in the wild

60

May 2026 CVE Landscape

Recorded FutureJun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250 CVE-2009-1537 CVE-2009-3459+19 CVEs

60

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

The Hacker NewsMay 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973 CVE-2026-0300

60

Vercel attack fallout expands to more customers and third

CyberScoopApr 23, 22:05 UTC · Apr 23, 2026Data breach in the wild1

60

Vercel's security breach started with malware disguised as Roblox cheats

CyberScoopApr 20, 20:24 UTC · Apr 20, 2026Malware in the wild

60

RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts

Security AffairsMar 17, 15:02 UTC · Mar 17, 2026Malware in the wildCVE-2023-1389 CVE-2024-3721 CVE-2024-12856+2 CVEs

60

Security Affairs newsletter Round 559 by Pierluigi Paganini

Security AffairsJan 18, 13:46 UTC · Jan 18, 2026Exploit / PoC in the wild

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174 CVE-2025-43529 CVE-2025-6218+43 CVEs

60

React2Shell Under Active Exploitation by China

Infosecurity MagazineDec 8, 11:40 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-55182

60

⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

The Hacker NewsDec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690 CVE-2025-38352 CVE-2025-48543+25 CVEs1

60

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60