Bugcrowd Security Flash - Microsoft TCP/IP Vulnerability: What You Need To Know @Bugcrowd

Uploaded January 2023 | Updated September 2026, 52 minutes ago

Bugcrowd Security Flash - Microsoft TCP/IP Vulnerability: What You Need To Know

Annual testing starts to look a little dusty when...

Log4Shell, The Worst Java Vulnerability in Years

100 criticals in one week? Great news. Also… a lot 😅

$Bugcrowd Security Flash: CVE-2025-55182 On December 3, 2025, the React Team disclosed a critical RCE vulnerability (CVE-2025-55182) affecting React Server Components in modern Next.js deployments. An unauthenticated attacker can trigger server-side remote code execution using a crafted HTTP request. More technical details will be available once the upstream patch rollout is complete. In this Bugcrowd Security Flash, Trey Ford and Matt Held outline what we know now, the potential impact, and what security teams should prioritize next. Stay informed as this vulnerability evolves. For ongoing updates, visit the Bugcrowd blog: https://www.bugcrowd.com/blog/cve-2025-55182-what-you-need-to-know-about-react2shell/?utm_campaign=security_flash&utm_source=youtube&utm_medium=organic_social&utm_content={TIMESTAMP_EPOCH}$ $Join this Q&A session! 📢 April 16 at 11 AM ET: https://www.bugcrowd.com/webinar/?commid=663767&bt_tok={{lead.Id}}&utm_source=youtube&utm_medium=organic_social Join Bugcrowd, CISA VDP, and public sector security leaders for a Q&A on the impact of FedRAMP Moderate authorization. Hear from Kent Wilson, Trey Ford, and Shondalyn Smith on what this means for vulnerability disclosure, operational rigor, and proactive security across government and beyond. 🎙️🔥$

Finding DOM XSS is like solving a puzzle

Bugcrowd |

Bugcrowd Security Flash - Microsoft TCP/IP Vulnerability: What You Need To Know