Middleware is a critical concept in Express.js that acts as a bridge between a client request and the server response. In this blog, we’ll…

In today’s rapidly evolving web development landscape, application security is paramount. As applications grow more complex, so do the methods used by malicious actors to exploit vulnerabilities. One…

Learn about CVE-2025-29927, a critical vulnerability in Next.js that impacts authorization checks in middleware.

Hello, I’m Mo. Elshaheedy Cyber Security Analyst & Teaching Assistant

Follow us on Blue Sky, Mastodon Twitter, Facebook and LinkedIn @Hackread

Introduction

How to Protect Your Next.js Applications from a Critical Middleware Bypass Vulnerability (CVE-2025–29927)

Hey there! In today’s blog, I’m diving into the Next.js Middleware Exploit — specifically CVE-2025–29927, an authorization bypass…

You thought ChatGPT was your co-pilot until it told your PHP app that 18 + blueberry equals JSON. Yep. That’s the moment your backend went…

Protect your .NET APIs from abuse and ensure scalability by implementing rate limiting using built-in middleware, custom logic, and Redis…

If your PHP middleware is just passing requests along like an absent-minded waiter, you’re basically inviting trouble to dinner and letting…

Introduction

Recently, I was looking into the security configurations in one of my apps which is developed in Node.js and using Express.js to configure…

Explore an authorisation bypass vulnerability in Next.js

Clerk reveals a critical 9.1 CVSS flaw in createRouteMatcher. Crafted requests can bypass middleware gating in Next.js, Nuxt, and Astro. Patch your apps now!

Critical RCE and XSS vulnerabilities hit Apache ActiveMQ (CVE-2026-41044, 40466). Authenticated attackers can hijack the JVM. Update to 5.19.6 or 6.2.5 now.

Critical RCE flaws hit Apache Camel via header injection and unsafe deserialization. Secure your integrations and upgrade to version 4.20.0 today.