next-CVE-2025-29927

CVE-2025-29927: Bypass de autorización en el middleware de Next.js Una vulnerabilidad crítica en Next.js CVE-2025-29927 permite el acceso no autorizado a rutas protegidas al omitir la lógica del middleware. El problema afecta a las versiones 11.1.4 a 13.5.6 de Next.js, y a las versiones 14.x...

hydra

채팅 · 토론 · 뉴스레터 · 문서 · Ory Network 사용해 보기 · 채용 Ory Hydra는 낮은 지연 시간, 높은 처리량, 낮은 리소스 소비에 최적화된 강화된OpenID 인증 OAuth 2.0 서버이자 OpenID Connect 제공자입니다. 로그인 및 동의 앱을 통해 기존 ID 제공자에 연결되므로 사용자 인터페이스와 경험을 완전히 제어할 수 있습니다. Ory Hydra란 무엇인가? Ory Hydra를 선택하는 이유 OAuth2 및 OpenID Connect: 공개 표준 OpenID Connect 인증 배포 옵션 O...

cve-2026-71362-magento-lab

CVE-2026-71362 — Magento / Adobe Commerce customer-session identity-switch lab A self-contained, one-command Docker lab that reproduces CVE-2026-71362 end to end and lets you verify Adobe's fix, so defenders, researchers and students can study a real account-takeover primitive on a disposable...

CVE-2023-22518

CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has warned administrators about a critical vulnerability in Confluence. Exploitation of this vulnerability could lead to data loss, therefore the developer recommends you install the patch...

CVE-2026-90474

MCPHub before 1.0.32 is affected by an authentication bypass in its embedded OAuth 2.0 authorization server. The root cause is that client authentication is disabled by default and PKCE enforcement is optional , allowing an attacker who intercepts an authorization code to redeem it for an access ...

EUVD-2026-76850

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Vulnerabilidad de evasión de middleware en Next.js Este repositorio demuestra la vulnerabilidad CVE-2025-29927 en Next.js, donde el encabezado interno x-middleware-subrequest puede utilizarse para evadir comprobaciones de middleware como la autenticación. Versiones...

CVE-2023-22518

CVE-2023-22518 Una herramienta de explotación para explotar servidores Confluence que son vulnerables a CVE-2023-22518, una vulnerabilidad de autorización incorrecta. Instalación: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Uso:...

CVE-2025-29927

CVE-2025-29927 ★ CVE-2025-29927 Bypass de middleware Next.js PoC ★ Descripción CVE-2025-29927 : PoC de bypass de middleware de Next.js descripción: Next.js es un framework de React para construir aplicaciones web completas. A partir de la versión 1.11.4 y anteriores a las versiones 12.3.5, 13.5.9...

CVE-2026-27344

Broken Access Control in Inseri Core WordPress Plugin Plugin: Inseri Core Affected Component: /includes/restapi.php Vulnerability Type: Broken Access Control Missing Authorization Status: Reported in August 2026– Closed as Duplicate. Summary Whilst testing this summer I came across a Broken Acces...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

CVE-2022-22978

CVE 2022-22978: Bypass de autorización en RegexRequestMatcher 🥶 Resumen Según la información que he investigado, esta es una vulnerabilidad relacionada con la clase RegexRequestMatcher del framework Spring Security. En concreto, las aplicaciones que usan RegexRequestMatcher y que en su expresión...

next-attack

Este es un proyecto de Next.js creado con create-next-app. Probando la vulnerabilidad Primero, puedes confirmar que el middleware funciona y debería redirigir al usuario: root@kitploit: curl http://localhost:3000/api/admin Luego, puedes mostrar cómo se está evadiendo el middleware con el siguient...

CVE-2025-29927

CVE-2025-29927 – Next.js Middleware Authorization Bypass This repository contains a functional exploit for CVE-2025-29927, a critical authorization bypass vulnerability in Next.js. The flaw allows attackers to bypass middleware-based authentication and authorization checks, granting unauthorized...

CVE-2021-46704-POC

CVE-2021-46704-POC CVE-2021-46704 GenieACS Command Injection POC Affecting genieacs package, versions =1.2.0 1.2.8 How to fix? Upgrade genieacs to version 1.2.8 or higher. Affected versions of this package are vulnerable to Command Injection via the ping host argument lib/ui/api.ts and lib/ping.t...

CVE-2023-26035

CVE-2023-26035 RCE no autenticado en ZoneMinder Snapshots - Exploit PoC alt img Descripción Las versiones de ZoneMinder anteriores a 1.36.33 y 1.37.33 son vulnerables a la ejecución remota de código no autenticada debido a la falta de controles de autorización en la acción de snapshot. Uso...

CVE-2025-29927-PoC-Exploit

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

CrushFTP-CVE-2024-4040-illdeed

CVE-2024-4040 — Exploit de omisión de autenticación de CrushFTP Este repositorio contiene un exploit sigiloso de prueba de concepto PoC en Python para CVE-2024-4040 , una vulnerabilidad crítica en CrushFTP v10 y anteriores que permite a un atacante omitir la autenticación mediante una cookie...

CVE-2026-11355

The DT LMS – elearning WordPress plugin (versions ≤ 1.1) is vulnerable to unauthorized modification of plugin settings due to missing capability checks on multiple AJAX handlers (dtlms_save_poc_settings, dtlms_save_skin_settings, dtlms_save_options_settings). These handlers are registered on the ...

amt_auth_bypass_poc

Ejemplo de omisión de autenticación de Intel AMT Este es un código de prueba de concepto que demuestra la explotación de la vulnerabilidad CVE-2017-5689. Es esencialmente un script de mitmproxy que simplemente vacía un campo "response" del encabezado Authorization. Ejemplo de uso: root@kitploit:...