nextjs-middleware-auth-bypass-lab

Next.js Middleware Authorization Bypass CVE-2025-29927 Qu'est-ce que la vulnérabilité ? Dans les applications Next.js, le middleware s'exécute avant que les requêtes n'atteignent l'application et effectue des contrôles tels que l'authentification et l'autorisation. Dans le cas de la vulnérabilité...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – Écriture Modbus TCP sur des bobines en lecture seule via l’usurpation de code de fonction Code du programme simulation Python avec pymodbus modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.device import...

CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-

8. CVE-2026-3456 – Condition de course PKCE OAuth2 Prise de contrôle de compte Vue d'ensemble Une condition de course dans le serveur d'autorisation OAuth2 permet à un attaquant de réutiliser le code d'autorisation d'une victime avant que le client légitime ne l'échange, en devinant ou en forçant...

ios-gamed-0day

Exploit iOS gamed corrigé dans 15.0.2 Mise à jour : Apple a discrètement corrigé ce problème dans iOS 15.0.2 sans aucune reconnaissance publique ni crédit. Toute application installée depuis l'App Store peut accéder aux données suivantes sans aucune invite de l'utilisateur : L'adresse e-mail de...

CVE-2026-54121

🛡️ CVE-2026-54121 — Enquête CTI Certighost Élévation de privilèges des services de certificats Active Directory / Risque de compromission de domaine Créé par Pratik Chhetri Date du rapport : 2026-07-28 📌 Synthèse Exécutive Champ| Constat ---|--- CVE| CVE-2026-54121 Nom| Certighost Éditeur|...

CVE-2026-66750-Insufficient-Access-Controls-Allow-for-Unauthorized-File-Downloads-Let-s-Chat-

استشارة أمنية: ضوابط وصول غير كافية تسمح بتنزيل ملفات غير مصرح به Let's Chat معرّف CVE المعيّن: CVE-2026-66750 ملخص يتحقق GET /files/:id/:name من أن المتصل قد سجّل الدخول ثم يقدّم الملف. لكنه لا يتحقق أبدًا مما إذا كان المتصل مخوّلًا لرؤية الغرفة التي ينتمي إليها الملف. وبالتالي يمكن لأي حساب قرا...

siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization

CVE-2026-66012 — Prise de contrôle administrateur non authentifiée de SiYuan MCP Preuve de concept pour CVE-2026-66012 CVSS 10.0 Critique, une vulnérabilité d'absence d'autorisation dans le point de terminaison MCP Model Context Protocol de SiYuan qui permet à un attaquant non authentifié de...

CVE-2026-12859

Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...

CVE-2026-14273

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

CVE-2026-107637

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...

CVE-2024-9821

CVE-2024-9821 Bot pour Telegram sur WooCommerce = 1.2.4 - Divulgation du jeton du bot Telegram authentifié Abonné+ menant à un contournement d'authentification Description Le plugin Bot pour Telegram sur WooCommerce pour WordPress est vulnérable à la divulgation d'informations sensibles en raison...

CVE-2025-47539

🚨 CVE-2025-47539 – استغلال حرج لإضافة Eventin في WordPress 🔥 ملخص الثغرة إضافة مدير الأحداث، تقويم الأحداث، التذاكر، التسجيلات – Eventin لـ WordPress معرضة لـ تصعيد صلاحيات دون مصادقة بسبب عدم وجود فحص تفويض في دالة importitems. 🔓 الإصدارات المتأثرة: ⚠️ هذا السكربت مخصص للاستخدام التعليمي...

EUVD-2026-95031

Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...

CVE-2026-12859 IDOR in Caz Informatics' Advancity ALMS Cloud

Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advancity ALMS Cloud: through 2026-10-08. NOTE: The vendor was contacted early about this disclosure but did not...

CVE-2026-12859

A Missing Authorization (CWE-862) vulnerability exists in Caz Informatics Services Trade Inc. Advancity ALMS Cloud . The flaw allows an attacker to access functionality that is not properly constrained by Access Control Lists (ACLs). This issue affects the product through 2026-10-08 . The CVSS v3...

CVE-2025-29927-PoC

CVE-2025-29927: إثبات مفهوم لتجاوز Middleware في Next.js يحتوي هذا المستودع على إثبات مفهوم PoC لثغرة CVE-2025-29927، وهي ثغرة في Middleware الخاص بـ Next.js تسمح بتجاوز عمليات التحقق من المصادقة والتفويض عبر التلاعب بالترويسات. تفاصيل الثغرة النسخ المتأثرة : = 11.1.4, 14.0.0, 15.0.0, 15.2.3 معرّ...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership لـ WordPress: تجاوز موافقة المشرف دون مصادقة استغلال إثبات مفهوم لـ CVE-2026-6145 ، وهو ثغرة تفويض مفقود في إضافة User Registration & Membership لـ WordPress ≤ 5.1.5 تتيح للمهاجمين غير المصادق عليهم تجاوز شرط موافقة المشرف عند إنشاء حسابات جديدة. ملخ...

EUVD-2026-95024

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...

CVE-2026-107637 pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...

CVE-2026-107637 pH7Builder before 18.5.0 Improper Authorization via Note Module delete() Action

pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...