CVE-2025-29927-PoC

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This repository contains a Proof of Concept PoC exploit for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks by abusing a middleware-specific HTTP header. Overview CVE ID:...

eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability CVE-2023-5324 If eero Pro 5 devices receive an IPv6 packet where the payload length is zero and contains a hop-by-hop or destination options extension header that refers to another hop-by-hop or destination options extension header that...

cve-2018-11714_POC

cve-2018-11714POC An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action. artigo pt-br:...

CVE-2024-34328

CVE-2024-34328 Open Redirection via Host Header 📝 Overview Vulnerability Title : Open Redirection via Host Header Product : Sielox AnyWare Version Affected : 2.1.2 CVE ID : CVE-2024-34328 Severity : Medium Attack Vector : Remote Impact : Open Redirection / Phishing 🧨 Description An attacker can...

CVE-2022-31813

Launch the Range docker compose up --build Normal Access GET / HTTP/1.1 Host: 127.0.0.1:8080 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/145.0.0.0 Safari/537.36 Accept:...

cve-2024-34351-demo

CVE-2024-34351 Demo Minimal Next.js 14.0.0 application for demonstrating CVE-2024-34351 -- a Server-Side Request Forgery SSRF vulnerability in Next.js Server Actions. Discovered by Adam Kues and Shubham Shah at Assetnote. Fixed in Next.js 14.1.1. How the vulnerability works When a Server Action...

nextjs-auth-bypass

nextjs-auth-bypass Analysis and exploitation of a Next.js authorization bypass vulnerability CVE-2025-29927 Next.js Authorization Bypass – CVE Analysis Overview This project demonstrates an authorization bypass vulnerability in a Next.js application caused by improper middleware validation...

CVE-2025-29927-Sigma-Rule

CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...

CVE-2020-35669

CVE-2020-35669 dummy server please run dummy server using 1st terminal sudo nc -l 127.0.0.1 80 apply given diff diff --git a/main.dart b/main.dart index 8c78291..a46f4d0 100644 --- a/main.dart +++ b/main.dart @@ -4,7 +4,7 @@ import 'package:http/src/request.dart'; void main async var r = Request...

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

cve-2000-0649

CVE-2000-0649 for Apache CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server from the Location parameter in the respose header. Official details are here: Rapid7: https://www.rapid7.com/db/modules/auxiliary/scanner/http/iisinternalip/ CV...

CVE-2025-66204

CVE-2025-66204: WBCE CMS allows brute-force protection bypass using X-Forwarded-For header Overview Field| Details ---|--- CVE ID| CVE-2025-66204 Severity| MEDIUM Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A brute-force protection bypass...

CVE-2025-29927

🕷️ Next.js CVE-2025-29927 🧑🏻‍💼 Legal Disclaimer This project is a Next.js application that has been intentionally configured to be vulnerable to an Authorization Bypass in Next.js Middleware CVE-2025-29927. It is provided solely for lawful, educational, and research purposes. By accessing, using,...

CVE-2025-29927

Next.js Middleware Authorization Bypass Vulnerability Test Environment CVE-2025-29927 📌 Project Overview This repository provides a local environment for testing the Next.js middleware authorization bypass vulnerability CVE-2025-29927. This vulnerability allows attackers to bypass middleware...

vulhub-struts2

Apache Struts2 S2-045 RCE CVE-2017-5638 📌 Overview This project demonstrates the Remote Code Execution RCE vulnerability in Apache Struts2 CVE-2017-5638. Attackers can exploit a crafted HTTP Content-Type header to execute arbitrary system commands on vulnerable servers. This repo uses Vulhub Dock...

CVE-2026-100870

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the request Host header without validation, allowing unauthenticated attackers to redirect reset tokens to attacker-controlled domains. Attackers can request password resets for know...

nextjs-cve-demo

Example: Authorization Bypass in Next.js Middleware CVE-2025-29927 This Repo provides example projects demonstrating the Middleware authorization bypass vulnerability in Next.js CVE-2025-29927. This vulnerability allows unauthorized users to access protected resources. Vulnerability Overview...

CVE-2026-100870 Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the request Host header without validation, allowing unauthenticated attackers to redirect reset tokens to attacker-controlled domains. Attackers can request password resets for know...

CVE-2026-100870

Sylius versions prior to 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 are vulnerable to administrator password-reset poisoning. The software builds password-reset links using the request Host header without proper validation. This allows unauthenticated attackers to use forged Host headers to red...

CVE-2026-100870 Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 Admin Password Reset Poisoning via Host Header

Sylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 build administrator password-reset links using the request Host header without validation, allowing unauthenticated attackers to redirect reset tokens to attacker-controlled domains. Attackers can request password resets for know...