/
ttps_attack:T1190 × latest_source_host:hacktron.ai × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · exploit público medium

Vercel React2Shell WAF bypass challenge: five parser-differential bypasses of CVE-2025-55182 protections found by Hacktron

Researchers at Hacktron (author ginoah) described five bypasses of the Vercel WAF rules protecting against React2Shell (CVE-2025-55182), a pre-auth RCE in React Server Functions affecting Next.js 15.x–16.0.6 and other React-based frameworks. The bypasses were found during a Vercel bounty challenge. Per Vercel's writeup, 116 researchers to…

CVE-2025-55182
hacktron.ai · medium

AI-accelerated 0-day research widens attack surface: Vercel breach via Context.ai OAuth, GitHub IDE extension compromise, Warp Terminal RCE

A Hacktron researcher argues that AI-assisted vulnerability research is rapidly widening the enterprise attack surface. He cites recent breaches at Vercel and GitHub and a wave of critical CVEs in F5, Fortinet, Cisco, Palo Alto and ImageMagick. According to the author, the Vercel compromise began with a breach of the AI platform Context.a…

technology software