Загрузка видео...

Не удалось загрузить видео

На главную

Next.js just got its worst vulnerability ever, CVSS 8.6. → affects versions 13.4.13+, 14.x, 15.x, and 16.0.0–16.2.4 → attackers can access your internal services, cloud credentials, API keys, and admin panels → no authentication needed → one crafted request is all it takes → roughly 79,000 instances are exploitable...

Star_Knight12's profile picture

Prasenjit

21,131 subscribers

862,264 просмотров • 1 месяц назад •via X (Twitter)

Новости и политикаНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

The all new @openai dot com is built with Next.js and hosted on Vercel 🫠
0:31

The all new @openai dot com is built with Next.js and hosted on Vercel 🫠

Jared Palmer

165,432 просмотров • 2 лет назад

Octolane AI is LIVE!! 🚀 LLM powered B2B data enrichment API! ✨ - API Documentation ( is also LIVE powered by Mintlify! - App secrets are secured by Infisical - Our real time search is powered by amazing Metaphor (insanely powerful and fast! 🤩) - APIs are hosted using Porter (1 click deploy to our own cloud account!) - Email system is powered by Resend (Archived) - Monitoring is powered by Helicone (setup took literally 1 minute!) - Database + authentication stack is on Supabase - Analyzing billions of row of data powered by ClickHouse (Crazy fast!! 🚀) - Next.js 14 hosted on Vercel using shadcn UI! We are still pretty early but moving pretty fast thanks to years of hard works of the amazing team above!! And thank you Startup Exchange and Carter Cote for your continuous support!! ❤️
0:35

Octolane AI is LIVE!! 🚀 LLM powered B2B data enrichment API! ✨ - API Documentation ( is also LIVE powered by Mintlify! - App secrets are secured by Infisical - Our real time search is powered by amazing Metaphor (insanely powerful and fast! 🤩) - APIs are hosted using Porter (1 click deploy to our own cloud account!) - Email system is powered by Resend (Archived) - Monitoring is powered by Helicone (setup took literally 1 minute!) - Database + authentication stack is on Supabase - Analyzing billions of row of data powered by ClickHouse (Crazy fast!! 🚀) - Next.js 14 hosted on Vercel using shadcn UI! We are still pretty early but moving pretty fast thanks to years of hard works of the amazing team above!! And thank you Startup Exchange and Carter Cote for your continuous support!! ❤️

Coffee with One 🇺🇸

12,010 просмотров • 2 лет назад

v3 of /last30days is here. 20,000+⭐ on GitHub. The biggest upgrade yet. An AI agent-led search engine scored by upvotes, likes, and real money - not editors. Reddit comments, X posts, and YouTube transcripts are now FREE. No API keys needed for the core sources. v3 killer feature: intelligent search. Before it searches, a Python pre-research brain resolves X handles, subreddits, TikTok hashtags, and YouTube channels for your topic. It finds the RIGHT places to search before the LLM judge assembles the report. Shout out to Jeffrey Sperling for building this engine New in v3: - Free Reddit, X, and YouTube (no API keys) - Intelligent pre-research engine - Best Takes (the funniest Reddit comments are first-class) - Cross-source cluster merging - Single-pass comparisons (X vs Y in 5 min, not 12) - GitHub person-mode - ELI5 mode
5:26

v3 of /last30days is here. 20,000+⭐ on GitHub. The biggest upgrade yet. An AI agent-led search engine scored by upvotes, likes, and real money - not editors. Reddit comments, X posts, and YouTube transcripts are now FREE. No API keys needed for the core sources. v3 killer feature: intelligent search. Before it searches, a Python pre-research brain resolves X handles, subreddits, TikTok hashtags, and YouTube channels for your topic. It finds the RIGHT places to search before the LLM judge assembles the report. Shout out to Jeffrey Sperling for building this engine New in v3: - Free Reddit, X, and YouTube (no API keys) - Intelligent pre-research engine - Best Takes (the funniest Reddit comments are first-class) - Cross-source cluster merging - Single-pass comparisons (X vs Y in 5 min, not 12) - GitHub person-mode - ELI5 mode

Matt Van Horn

332,420 просмотров • 2 месяцев назад

Replit now deploys directly to Databricks. Your apps run inside your Databricks environment while inheriting its security, governance, and data access. Beta is live. Enterprises are already building with it and seeing massive acceleration in BI and internal tools.
0:23

Replit now deploys directly to Databricks. Your apps run inside your Databricks environment while inheriting its security, governance, and data access. Beta is live. Enterprises are already building with it and seeing massive acceleration in BI and internal tools.

Amjad Masad

115,735 просмотров • 2 месяцев назад

🚀 Wanna build apps with Next.js 14? 🚀 $ npx create-next-app -e with-supabase Get a Next.js 14 app pre-configured with Supabase: 🗄️ Hosted Database 🤝 Authentication 👮 Authorization 🔪 Edge Functions ⌚️ Realtime Subscriptions 🤖 AI Vectors
0:59

🚀 Wanna build apps with Next.js 14? 🚀 $ npx create-next-app -e with-supabase Get a Next.js 14 app pre-configured with Supabase: 🗄️ Hosted Database 🤝 Authentication 👮 Authorization 🔪 Edge Functions ⌚️ Realtime Subscriptions 🤖 AI Vectors

Jon Meyers

11,806 просмотров • 2 лет назад

Amazing apps for makers and coders - Open-source self-hosted uptime monitoring - Thousands of avatars via API, JS or CLI - naming platform for brand, product... - X posts as clean Markdown - Inbox for people who hate email
0:37

Amazing apps for makers and coders - Open-source self-hosted uptime monitoring - Thousands of avatars via API, JS or CLI - naming platform for brand, product... - X posts as clean Markdown - Inbox for people who hate email

Csaba Kissi

16,876 просмотров • 1 месяц назад

API Permissions Clarified …you control every permission yourself. When creating an API key on your exchange, you decide what SUMEX can or cannot do. …withdrawal permissions are NEVER required. SUMEX does not request - and cannot use, any withdrawal rights. …your keys stay encrypted. We don’t see your API keys in plain text. They are stored in secure encrypted form and cannot be used outside the SUMEX terminal. …you can disable our access anytime. Just revoke permissions on your exchange - instant disconnect. Trade smarter, stay in control, and farm SP safely. gSUMEX
1:02

API Permissions Clarified …you control every permission yourself. When creating an API key on your exchange, you decide what SUMEX can or cannot do. …withdrawal permissions are NEVER required. SUMEX does not request - and cannot use, any withdrawal rights. …your keys stay encrypted. We don’t see your API keys in plain text. They are stored in secure encrypted form and cannot be used outside the SUMEX terminal. …you can disable our access anytime. Just revoke permissions on your exchange - instant disconnect. Trade smarter, stay in control, and farm SP safely. gSUMEX

SUMEX | Web3 SuperApp

22,518 просмотров • 4 месяцев назад

Introducing LlamaEdge — lightweight & portable LLM tools for your local, edge & server devices. Based on WasmEdge, LlamaEdge apps are <5 MB, self-contained (no complex dependencies), sandboxed (cloud ready), and can be orchestrated by container tools. LlamaEdge apps are portable across diverse CPUs, GPUs, and OSes. It is super easy to build on them, test locally and then deploy to different devices on the edge or cloud. Try them today! 🚀
0:17

Introducing LlamaEdge — lightweight & portable LLM tools for your local, edge & server devices. Based on WasmEdge, LlamaEdge apps are <5 MB, self-contained (no complex dependencies), sandboxed (cloud ready), and can be orchestrated by container tools. LlamaEdge apps are portable across diverse CPUs, GPUs, and OSes. It is super easy to build on them, test locally and then deploy to different devices on the edge or cloud. Try them today! 🚀

wasmedge

18,094 просмотров • 2 лет назад

Community nodes are now becoming available on n8n Cloud! Starting today instance owners can install a curated and growing list of community nodes on both Cloud and self-hosted instances from the Nodes panel. Learn all (including how to get YOUR node added) 👉 The following nodes can be accessed right now, and more will be added soon: Partner supported nodes: - ElevenLabs - SerpApi - SOCRadar® - tavily - Browserflow - pdforge - Straker - Mallabe - ScrapeGraphAI - Chat Data Community supported nodes: - TickTick - LavaTop - DigitalOcean - - LogSnag #n8n #lowcode #nodes
0:31

Community nodes are now becoming available on n8n Cloud! Starting today instance owners can install a curated and growing list of community nodes on both Cloud and self-hosted instances from the Nodes panel. Learn all (including how to get YOUR node added) 👉 The following nodes can be accessed right now, and more will be added soon: Partner supported nodes: - ElevenLabs - SerpApi - SOCRadar® - tavily - Browserflow - pdforge - Straker - Mallabe - ScrapeGraphAI - Chat Data Community supported nodes: - TickTick - LavaTop - DigitalOcean - - LogSnag #n8n #lowcode #nodes

n8n.io

12,164 просмотров • 1 год назад

FaceTime video support for AI agents through Linq’s API is now in early preview. Your AI assistant, personal trainer, or therapist - available to users through native apps like FaceTime and iMessage. Existing customers like Pika are already building on it. No new apps needed 📈
1:02

FaceTime video support for AI agents through Linq’s API is now in early preview. Your AI assistant, personal trainer, or therapist - available to users through native apps like FaceTime and iMessage. Existing customers like Pika are already building on it. No new apps needed 📈

Elliott Potter

183,047 просмотров • 2 месяцев назад

‼️ OpenClaw, also known by Moltbot and ClawdBot, recently patched a 1-Click RCE via Authentication Token Exfiltration From gatewayUrl CVSS: 8.8 Advisory: Writeup: All versions up to v2026.1.24-1 are vulnerable. Video: Ethiack
0:23

‼️ OpenClaw, also known by Moltbot and ClawdBot, recently patched a 1-Click RCE via Authentication Token Exfiltration From gatewayUrl CVSS: 8.8 Advisory: Writeup: All versions up to v2026.1.24-1 are vulnerable. Video: Ethiack

Dark Web Informer

18,960 просмотров • 5 месяцев назад

We redesigned Reve. Editing is easier than ever. Now all your tools are in one panel on the right. And you can make changes to anything just by clicking directly and prompting.
0:35

We redesigned Reve. Editing is easier than ever. Now all your tools are in one panel on the right. And you can make changes to anything just by clicking directly and prompting.

Reve

374,040 просмотров • 4 месяцев назад

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out:
0:36

Every 3rd website you visit runs Nginx. 18,959,833 of them can be hijacked right now. A bug from 2008 just got a working exploit. CVE-2026-42945 (CVSS 9.2) No login. No access. Just one HTTP request. → Heap overflow → Worker process → RCE Patch ASAP to Nginx 1.31.0 or 1.30.1 PoC is already out:

Het Mehta

152,192 просмотров • 1 месяц назад

You can now use AI integrations in v0: • Add generative AI to your applications with models from xAI, fal, Groq Inc, or DeepInfra • API keys are automatically set up for you — no additional signup necessary • Pay as you go, top up automatically, and manage your spend through Vercel Marketplace
1:01

You can now use AI integrations in v0: • Add generative AI to your applications with models from xAI, fal, Groq Inc, or DeepInfra • API keys are automatically set up for you — no additional signup necessary • Pay as you go, top up automatically, and manage your spend through Vercel Marketplace

v0

97,901 просмотров • 1 год назад

🚀 Say hello to Sequence Sidekick — your new BFF for building web3 games, DeFi apps & dynamic NFTs! 🤞 It’s a self-hosted, containerized backend built with Fastify + TypeScript that’s fully open-source and ready to do the heavy lifting 🦾 No more API juggling, indexing chaos, or transaction wrangling 😵‍💫 Just clean, scalable blockchain infra — in your cloud☁️
0:34

🚀 Say hello to Sequence Sidekick — your new BFF for building web3 games, DeFi apps & dynamic NFTs! 🤞 It’s a self-hosted, containerized backend built with Fastify + TypeScript that’s fully open-source and ready to do the heavy lifting 🦾 No more API juggling, indexing chaos, or transaction wrangling 😵‍💫 Just clean, scalable blockchain infra — in your cloud☁️

Sequence

79,528 просмотров • 1 год назад

AI Agents can now access your tools with Composio MCP. You can connect Claude, Cursor, Windsurf to 250+ apps and 20,000+ API actions while skipping complex authentication setup. All of this without writing a single line of Python Code.
2:08

AI Agents can now access your tools with Composio MCP. You can connect Claude, Cursor, Windsurf to 250+ apps and 20,000+ API actions while skipping complex authentication setup. All of this without writing a single line of Python Code.

Shubham Saboo

72,358 просмотров • 1 год назад

Can ChatGPT run Doom? Yes. ChatGPT Apps are very powerful. I cloned our Next.js ChatGPT template, registered a 𝚙𝚕𝚊𝚢_𝚍𝚘𝚘𝚖 MCP tool and deployed to Vercel. Once the tool is called, ChatGPT embeds the full Next.js application. Server and client rendering just works, and it's 100% interactive. h/t Allen Zhou for the starter kit:
0:46

Can ChatGPT run Doom? Yes. ChatGPT Apps are very powerful. I cloned our Next.js ChatGPT template, registered a 𝚙𝚕𝚊𝚢_𝚍𝚘𝚘𝚖 MCP tool and deployed to Vercel. Once the tool is called, ChatGPT embeds the full Next.js application. Server and client rendering just works, and it's 100% interactive. h/t Allen Zhou for the starter kit:

Guillermo Rauch

392,926 просмотров • 8 месяцев назад

Codex 0.93 is here, and with it, shiny new features! App Connectors have arrived. Connect to an array of cloud apps directly from your terminal. No config files. No setting up MCP servers, or hunting down docs. Just two clicks, and you're off! Github, Notion, Google Apps, Microsoft Apps, Vercel, Adobe, Canva, Dropbox, Expedia, Figma, Coursera, Hubspot, Linear, Monday, Instacart, SendGrid, Resent, Stripe, Target, and Peleton? Plus more. OpenAI is going for a unified experience from cloud to terminal, and they unlock a bunch of capabilities for your terminal agent. I believe with this direction they're going, they are truly leaning into a complete AI assistant, not just for coding. While these capabilities are not exactly new, they are much easier to install and use, greatly improving the UX for everyone. I for one, appreciate it. To get started, update Codex, and type /experimental. Turn on "Apps" and restart your session. If you want more videos like this, please drop a comment!
3:02

Codex 0.93 is here, and with it, shiny new features! App Connectors have arrived. Connect to an array of cloud apps directly from your terminal. No config files. No setting up MCP servers, or hunting down docs. Just two clicks, and you're off! Github, Notion, Google Apps, Microsoft Apps, Vercel, Adobe, Canva, Dropbox, Expedia, Figma, Coursera, Hubspot, Linear, Monday, Instacart, SendGrid, Resent, Stripe, Target, and Peleton? Plus more. OpenAI is going for a unified experience from cloud to terminal, and they unlock a bunch of capabilities for your terminal agent. I believe with this direction they're going, they are truly leaning into a complete AI assistant, not just for coding. While these capabilities are not exactly new, they are much easier to install and use, greatly improving the UX for everyone. I for one, appreciate it. To get started, update Codex, and type /experimental. Turn on "Apps" and restart your session. If you want more videos like this, please drop a comment!

am.will

34,023 просмотров • 5 месяцев назад

If you're juggling 10+ API Keys like me, this video is gonna save your life Agent Cash has 1000s of API Keys that you can access from ONE Solana wallet with USDC instead of needing to link 10 cards You load up a wallet with USDC and whenever you need to call an API from the 1000s they have, it uses your balance from there Google Veo, Nano Banana 2, X API, Web Search, Prices and 1000s more are all accessible from one place now instead of needing to link 10 cards to 10 different places Here's me showing how easy it is to give to your Openclaw and then making a video of a flying dinosaur with it
4:57

If you're juggling 10+ API Keys like me, this video is gonna save your life Agent Cash has 1000s of API Keys that you can access from ONE Solana wallet with USDC instead of needing to link 10 cards You load up a wallet with USDC and whenever you need to call an API from the 1000s they have, it uses your balance from there Google Veo, Nano Banana 2, X API, Web Search, Prices and 1000s more are all accessible from one place now instead of needing to link 10 cards to 10 different places Here's me showing how easy it is to give to your Openclaw and then making a video of a flying dinosaur with it

ashen

38,122 просмотров • 3 месяцев назад

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.
0:41

Introducing Platforms Starter Kit v2 → It's an open-source Next.js template for you to build multi-tenant apps with custom domains in days, not months. Built with Next.js App Router and the @Vercel Domains API.

Steven Tey

305,202 просмотров • 3 лет назад