English
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
RootSysAt's profile picture. We deliver top-tier security services, including penetration testing, code audits, security research, hardware hacking, and AppSec reviews.

RootSys

@RootSysAt

We deliver top-tier security services, including penetration testing, code audits, security research, hardware hacking, and AppSec reviews.

10Posts 155Followers 9Following
Pinned
RootSysAt's profile picture.
RootSys
 @RootSysAt
Sep 21

🚨 Next.js and the Mutated Middleware [CVE-2025-57822] - a powerful SSRF primitive enabling full control over HTTP methods, headers & URLs. See how a subtle middleware bug can result in a high-impact vulnerability: 🔗 blog.rootsys.at/posts/nextjs-a… #AppSec #Nextjs #SSRF

RootSysAt's tweet card. This post details our discovery of CVE-2025-57822, a powerful SSRF in Next.js that allows full control over HTTP methods, headers, and target URLs.
Next.js and the Mutated Middleware
Source: blog.rootsys.at
1
46
163
106
26K
RootSys reposted
payloadartist's profile picture.
payloadartist
 @payloadartist
Oct 31

Next.js and the Mutated Middleware - interesting analysis of CVE-2025-57822 in Next.js blog.rootsys.at/posts/nextjs-a… By @RootSysAt team #bugbounty #bugbountytips

payloadartist's tweet image. Next.js and the Mutated Middleware - interesting analysis of CVE-2025-57822 in Next.js blog.rootsys.at/posts/nextjs-a… By @RootSysAt team #bugbounty #bugbountytips
2
18
92
72
5K
RootSysAt's profile picture.
RootSys
 @RootSysAt
Oct 24

Thank you, Clint, for featuring our research — Next.js and the Mutated Middleware!

clintgibler's profile picture. 🗡️ Head of Security Research @semgrep 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
Clint Gibler
 @clintgibler
Oct 23

📚 tl;dr sec 302 🤖 LLM Honeypot Catches Threat Actor, ⛓️ Supply Chain Compromise Survey, 😈AI-powered Malware tldrsec.com/p/tldr-sec-302

clintgibler's tweet card. Deceiving attackers with an LLM SSH honeypot, root cause analysis of 2024/2025 supply chain compromises, malware leveraging AI for stealth/better effectiveness
[tl;dr sec] #302 - LLM Honeypot Catches Threat Actor, Supply Chain Compromise Survey, AI-powered...
Source: tldrsec.com
1
1
8
1
1K
0
0
2
0
145
RootSys reposted
intigriti's profile picture.
Intigriti
@intigriti
Sep 28

Next.js has become one of the most popular web development frameworks 🤠 But its extensive functionality introduces multiple attack surfaces for security vulnerabilities to arise... 😬 In our latest article, we documented 3 possible ways to exploit server-side request forgery…

intigriti's tweet image. Next.js has become one of the most popular web development frameworks 🤠 But its extensive functionality introduces multiple attack surfaces for security vulnerabilities to arise... 😬 In our latest article, we documented 3 possible ways to exploit server-side request forgery…
2
26
142
139
10K
RootSys reposted
zhero___'s profile picture.
zhero;
 @zhero___
Sep 27

nice write-up by the authors of the SSRF vector discovery in next.js (CVE-2025-57822), on which the latest Inti CTF/chall was based :

RootSysAt's profile picture. We deliver top-tier security services, including penetration testing, code audits, security research, hardware hacking, and AppSec reviews.
RootSys
 @RootSysAt
Sep 21

🚨 Next.js and the Mutated Middleware [CVE-2025-57822] - a powerful SSRF primitive enabling full control over HTTP methods, headers & URLs. See how a subtle middleware bug can result in a high-impact vulnerability: 🔗 blog.rootsys.at/posts/nextjs-a… #AppSec #Nextjs #SSRF

RootSysAt's tweet card. This post details our discovery of CVE-2025-57822, a powerful SSRF in Next.js that allows full control over HTTP methods, headers, and target URLs.
Next.js and the Mutated Middleware
Source: blog.rootsys.at
1
46
163
106
26K
2
16
129
53
11K
RootSysAt's profile picture.
RootSys
 @RootSysAt
Sep 17, 2024

RootSys delivers top-tier security services. Check it out at rootsys.at.

RootSysAt's tweet image. RootSys delivers top-tier security services. Check it out at rootsys.at.
0
1
5
0
946

United States Trends

Something went wrong.


Something went wrong.