Harsh Jaiswal's banner
Harsh Jaiswal's profile picture

Harsh Jaiswal

@rootxharsh • 27,725 subscribers

Co-founder and research @hacktronai | auditing at @cure53berlin | prev @zomato @vimeo @pdiscoveryio @httpvoid0x2f

Shorts

Last week's Next.js stable release patches multiple vulnerabilities found by Hacktron AI CVE-2026-44578: SSRF via WebSocket upgrade. It is the most impactful of all, it lets an attacker read internal hosts such as cloud metadata endpoints on self-hosted next.js applications. curl -H "Connection: Upgrade" -H "Upgrade: websocket" \ -H "Sec-WebSocket-Version: 13" \ -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" \ " \ --request-target "

Last week's Next.js stable release patches multiple vulnerabilities found by Hacktron AI CVE-2026-44578: SSRF via WebSocket upgrade. It is the most impactful of all, it lets an attacker read internal hosts such as cloud metadata endpoints on self-hosted next.js applications. curl -H "Connection: Upgrade" -H "Upgrade: websocket" \ -H "Sec-WebSocket-Version: 13" \ -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" \ " \ --request-target "

17,712 views

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

This affects huge number of applications, we will disclose technical details of every major company in coming weeks at . For example; Slack which is used by multiple AI companies and we could have leaked any user's uploaded files via our RCE.
0:33
rootxharsh's profile picture

This affects huge number of applications, we will disclose technical details of every major company in coming weeks at . For example; Slack which is used by multiple AI companies and we could have leaked any user's uploaded files via our RCE.

Harsh Jaiswal

133,551 views • 1 month ago

No more content to load