1.Next.js next/og SVG Injection to Native RCE Exploit PoC (CVE-2026-94545)vulnerability | Critical | 2026-09-29 07:52 | CVE-2026-94545 | github.com | Original ↗ | .md | #bug-bounty | #rce | #red-team
2.Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundupblog | 2026-07-21 08:36 | yeswehack.com | Original ↗ | .md | #ai-security | #vulnerability-research | #github
3.$170k in Bypasses: The Vercel React2Shell Challengeblog | 2026-05-04 00:00 | hacktron.ai | Original ↗ | .md | #bug-bounty | #react2shell | #nextjs
4.vinext: Vibe-Hacking Cloudflare's Vibe-Coded Next.js Replacementblog | 2026-02-27 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #vulnerability-research | #cloudflare
5.React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js Appvulnerability | Critical | Actively exploited | 2025-12-10 00:00 | CVE-2025-55182 | hunt.io | Original ↗ | .md | #rce | #vulnerability | #nextjs
6.React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shellvulnerability | High | 2025-12-12 00:00 | CVE-2025-55184 | aikido.dev | Original ↗ | .md | #appsec | #vulnerability-research | #denial-of-service
7.CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATEDvulnerability | 2025-12-09 14:15 | jfrog.com | Original ↗ | .md | #rce | #vulnerability | #cve
8.How to detect React2Shell with Burp Suiteblog | 2025-12-05 13:53 | portswigger.net | Original ↗ | .md | #rce | #appsec | #burp-suite
9.Middleware mayhem, Zoolander banter PoC, Malta to pardon hackers over ‘unfair’ charges – ethical hacker news roundupblog | 2025-04-30 13:20 | CVE-2025-29927 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-research
10.Advisory: Next.js SSRF (CVE-2024-34351)research | 2024-05-09 00:00 | CVE-2024-34351 | slcyber.io | Original ↗ | .md | #vulnerability-research | #advisory | #nextjs
11.Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Libraryvulnerability | 2022-09-21 00:00 | samcurry.net | Original ↗ | .md | #web3 | #xss | #nextjs
12.Phone Authentication with Twilio, NextJS and Supabaseblog | 2021-09-07 01:00 | hackerone.com | Original ↗ | .md | #authentication | #tutorial | #nextjs
13.Authentication with NextJS and Supabaseblog | 2021-08-03 01:00 | hackerone.com | Original ↗ | .md | #authentication | #tutorial | #nextjs
14.How to Create a Next.js, TypeScript and Tailwind CSS Projectblog | 2021-07-30 01:00 | hackerone.com | Original ↗ | .md | #tutorial | #nextjs | #typescript
15.Build a Simple Blog Site with Next.js and Markdownblog | 2020-10-07 01:00 | hackerone.com | Original ↗ | .md | #tutorial | #nextjs | #react