Post · bonfire.cafe

Post

Log in

@h4ckernews@mastodon.social · 4 days ago

Next JavaScript app is hacked, you just don't know it yet

https://audits.blockhacks.io/audit/your-next-js-app-is-already-hacked

#HackerNews #NextJavaScriptApp #Hacked #CyberSecurity #WebDevelopment #JavaScript #SecurityAwareness

Your Next JS app is already hacked, you just don't know it yet - Also logs show nothing!

Why 500 Internal Server Errors in Next.js signal Remote Code Execution (RCE) - deserialization executes code before logging/validation, attackers use errors as feedback for full server compromise

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances

Bonfire social · 1.0.1-alpha.40 no JS en

Automatic federation enabled

Log in