110164 matches found
CVE-2025-29927
CVE-2025-29927 Next.js 中间件绕过扫描器 CVE-2025-29927 CVE-2025-29927 是一款专门用于检测 Next.js 中间件绕过漏洞 CVE-2025-29927 的安全工具，该漏洞影响 Next.js 版本 11.1.4 至 15.2.2。这一严重漏洞允许攻击者通过发送特制的 HTTP 头来绕过安全控制。 关于漏洞 Next.js 中间件绕过漏洞 CVE-2025-29927 允许攻击者通过发送恶意 X-Middleware-Subrequest 头来绕过授权控制，该头会混淆中间件处理逻辑。这可能导致对受保护资源和路由的未授权访问。 CVSS...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — CrushFTP 身份验证绕过漏洞利用 本仓库包含一个隐蔽的 Python 概念验证（PoC）漏洞利用程序，针对 CVE-2024-4040 ，这是 CrushFTP（v10 及以下版本）中的一个关键漏洞，允许攻击者使用伪造的 CrushAuth cookie 和 AWS 风格的 Authorization 标头绕过身份验证。 🚨 漏洞摘要 未经身份验证的攻击者可以通过构造特定的 cookie/标头组合，绕过存在漏洞的 CrushFTP 实例的身份验证，从而未经授权访问内部 Web 功能。 CVE ID ：CVE-2024-4040 严重性 ：严重（CVS...
NextSecureScan
NextSecureScan - Next.js CVE-2025-29927 中间件漏洞扫描器 NextSecureScan 是一款全面的安全扫描器，专门设计用于识别 Next.js 应用程序中与中间件相关的授权绕过漏洞（CVE-2025-29927）。该扫描器利用显式头部操作技术、中间件重定向检测以及高级多语言绕过方法，提供彻底的漏洞评估。 🛡️ 功能特性 中间件检测 ：通过标准及高级 HTTP 头部检查（x-middleware-rewrite、x-middleware-set-cookie）显式检测 Next.js 中间件的使用情况。 重定分析 ：清晰识别中间件触发的重定向（HTT...
rbuster
Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...
CVE-2026-12859 IDOR in Caz Informatics' Advancity ALMS Cloud
Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...
CVE-2026-12859
A Missing Authorization (CWE-862) vulnerability exists in Caz Informatics Services Trade Inc. Advancity ALMS Cloud . The flaw allows an attacker to access functionality that is not properly constrained by Access Control Lists (ACLs). This issue affects the product through 2026-10-08 . The CVSS v3...
EUVD-2026-95031
Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...
cve-2020-15956
cve-2020-15956 Los servidores ACTi NVR 2.3 Standard/Professional y ACTi NVR3 Standard/Professional permiten a atacantes remotos no autenticados realizar una denegación de servicio. Para explotar esta vulnerabilidad, basta con enviar una carga útil de cabecera de autorización malformada de al meno...
CVE-2025-29927-PoC
CVE-2025-29927: PoC de Bypass de Middleware de Next.js Este repositorio contiene una prueba de concepto PoC para CVE-2025-29927, una vulnerabilidad en el middleware de Next.js que permite eludir las comprobaciones de autenticación y autorización mediante la manipulación de cabeceras. Detalles de ...
CVE-2026-6145
CVE-2026-6145 — User Registration & Membership for WordPress: 未认证管理员审批绕过 针对 CVE-2026-6145 的概念验证漏洞利用，这是一个存在于 WordPress 插件 User Registration & Membership（≤ 5.1.5）中的缺失授权漏洞，允许未认证攻击者在创建新账户时绕过管理员审批要求。 摘要 | ---|--- CVE ID| CVE-2026-6145 CNA| Wordfence 漏洞类型| 缺失授权 — 管理员审批绕过 CWE| CWE-862（缺失授权） CVSS 3.1| 5....
CVE-2026-107637
pH7Builder (pH7 Social Dating CMS) versions prior to 18.5.0 are vulnerable to an improper authorization flaw within the note module delete() action . The root cause is a lack of profile ID checks in the database queries, which allows authenticated members to delete note comments and categories be...
CVE-2026-107637 pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
CVE-2026-107637 pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
EUVD-2026-95024
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...
CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...
EUVD-2026-94999
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...
CVE-2026-14273
IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an incorrect authorization flaw (CWE-863). This issue could allow a local attacker to obtain sensitive information . No specific root cause...
