Curated security research, vulnerabilities, advisories and tools for practitioners.

#nextjs

Security coverage tagged nextjs.

1.

Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundup

blog | 2026-07-21 08:36 | yeswehack.com | original ↗ | #ai-security | #vulnerability-research | #github

2.

React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App

vulnerability | Critical | Actively exploited | 2025-12-10 00:00 | CVE-2025-55182 | hunt.io | original ↗ | #rce | #vulnerability | #nextjs

3.

React & Next.js DoS Vulnerability (CVE-2025-55184): What You Need to Fix After React2Shell

vulnerability | High | 2025-12-12 00:00 | CVE-2025-55184 | aikido.dev | original ↗ | #appsec | #vulnerability-research | #denial-of-service

4.

CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATED

vulnerability | 2025-12-09 14:15 | jfrog.com | original ↗ | #rce | #vulnerability | #react2shell

5.

How to detect React2Shell with Burp Suite

blog | 2025-12-05 13:53 | portswigger.net | original ↗ | #rce | #appsec | #burp-suite

6.

Middleware mayhem, Zoolander banter PoC, Malta to pardon hackers over ‘unfair’ charges – ethical hacker news roundup

blog | 2025-04-30 13:20 | CVE-2025-29927 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #vulnerability-research

7.

Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library

vulnerability | 2022-09-21 00:00 | samcurry.net | original ↗ | #web3 | #xss | #nextjs

8.

Phone Authentication with Twilio, NextJS and Supabase

blog | 2021-09-07 01:00 | hackerone.com | original ↗ | #authentication | #tutorial | #nextjs

9.

Authentication with NextJS and Supabase

blog | 2021-08-03 01:00 | hackerone.com | original ↗ | #authentication | #tutorial | #nextjs

10.

How to Create a Next.js, TypeScript and Tailwind CSS Project

blog | 2021-07-30 01:00 | hackerone.com | original ↗ | #tutorial | #nextjs | #typescript

11.

Build a Simple Blog Site with Next.js and Markdown

blog | 2020-10-07 01:00 | hackerone.com | original ↗ | #tutorial | #nextjs | #react