/
initial_access_vector:exploit_public_facing × criticity:medium × latest_source_host:hacktron.ai × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · medium

Hacktron CLI AI-assisted audit of JDBC drivers finds file read/write and RCE chain in Databricks, file read in Exasol; $85K in bounties

Researcher Harsh Jaiswal of Hacktron describes using the AI-assisted Hacktron CLI with a custom "JDBC driver pack" to audit decompiled JDBC drivers during a bug bounty event. The audit surfaced multiple vulnerabilities across vendor drivers, earning $85,000 in bounties. The headline finding is in the Databricks JDBC driver, where an attac…

hacktron.ai · exploit público medium

Vercel React2Shell WAF bypass challenge: five parser-differential bypasses of CVE-2025-55182 protections found by Hacktron

Researchers at Hacktron (author ginoah) described five bypasses of the Vercel WAF rules protecting against React2Shell (CVE-2025-55182), a pre-auth RCE in React Server Functions affecting Next.js 15.x–16.0.6 and other React-based frameworks. The bypasses were found during a Vercel bounty challenge. Per Vercel's writeup, 116 researchers to…

CVE-2025-55182