CVE-2025-29927

CVE-2025-29927 CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions root@kitploit: Next.js...

nextjs-middleware-exploit

Investigación de vulnerabilidad en middleware de Next.js CVE-2025-29927 Este repositorio demuestra una vulnerabilidad crítica en el middleware de Next.js CVE-2025-29927, que afecta a las versiones 11.1.4 hasta 15.1.7. Esta vulnerabilidad permite el bypass de autorización , el bypass de CSP y...

Tiny-XSS-Payloads

Tiny-XSS-Payloads A collection of short XSS payloads that can be used in different contexts. The DEMO available here: https://tinyxss.terjanq.me Current Payloads root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit:...

pixload

pixload -- Image Payload Creating tools DESCRIPTION Set of tools for hiding backdoors creating/injecting payload into images. The following image types are currently supported: BMP, GIF, JPG, PNG, WebP. about Useful references for better understanding of pixload and its use-cases: Bypassing CSP...

JSONBee

JSONBee A ready to use JSONP endpoints to help bypass content security policy of different websites. The tool was presented during HackIT 2018 in Kiev. The presentation can be found here not sure why format of the slides is screwed :D:...

EUVD-2026-68328

Use of Insufficiently Random Values vulnerability in ash-project ashadmin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. When mounted without :cspnonceassignkey, AshAdmin.Router.ashadmin/2 defaulted the img, style, and script nonces to the...

CVE-2026-81852 AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass

Use of Insufficiently Random Values vulnerability in ash-project ashadmin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. When mounted without :cspnonceassignkey, AshAdmin.Router.ashadmin/2 defaulted the img, style, and script nonces to the...

CVE-2026-81852

AshAdmin (ash-project/ash_admin), an Elixir/Phoenix library, shipped a hardcoded CSP nonce (ash_admin-Ed55GFnX) as a compile-time constant when mounted without the :csp_nonce_assign_key option. This value was written verbatim into inline and [removed] tags on every response and was never rotated...

CVE-2026-81852 AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass

Use of Insufficiently Random Values vulnerability in ash-project ashadmin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-Policy protection. When mounted without :cspnonceassignkey, AshAdmin.Router.ashadmin/2 defaulted the img, style, and script nonces to the...

next.js_cve-2025-29927

next.jscve-2025-29927 Una piccola e semplice applicazione Next.js che esegue la versione 14.2.24 utilizzata per testare CVE-2025-29927. Accedi all'area amministrativa /admin sfruttando la vulnerabilità o le credenziali hardcoded admin:admin. root@kitploit: » git clone...

CVE-2020-6519

Chromium 83 Zero Day Full CSP Bypass Cross Platforms CVE-2020-6519 Articolo Tecnico POC come segnalato al progetto chromium...

CVE-2019-18426

Divulgazione delle vulnerabilità di WhatsApp - Open Redirect + CSP Bypass + XSS persistente + permessi di lettura FS + potenziale RCE CVE-2019-18426 Articolo tecnico Documenti originali di divulgazione delle vulnerabilità...

POC-CVE-2025-29927

CVE-2025-29927: Next.js Middleware-Bypass PoC Überblick Dieses PoC demonstriert CVE-2025-29927, eine Schwachstelle in Next.js Middleware, die Angreifern ermöglicht, Authentifizierungs-, Autorisierungs- und CSP-Mechanismen mithilfe des x-middleware-subrequest-Headers zu umgehen. Betroffene Version...

CSPBypass

Bypass CSP Benvenuto su CSPBypass.com , uno strumento progettato per aiutare gli ethical hacker a bypassare le Content Security Policy CSP restrittive e sfruttare le vulnerabilità XSS Cross-Site Scripting su siti in cui le iniezioni sono bloccate da CSP che consentono solo determinati domini in...

CVE-2020-6519

Dies wurde ursprünglich auf dem offiziellen GitHub von PerimeterX über mein Arbeits-GitHub-Konto veröffentlicht. Auch wenn dies meine Arbeit ist – alle Rechte und rechtlichen Belange gehören der Firma PerimeterX. Chromium 83 Zero Day Vollständiger CSP-Bypass plattformübergreifend CVE-2020-6519...

CVE-2019-18426

Questo è stato originariamente pubblicato sul Github ufficiale di PerimeterX tramite il mio account Github di lavoro. Nonostante questo sia un mio lavoro - tutti i diritti e le questioni legali appartengono a PerimeterX. Divulgazione delle vulnerabilità di WhatsApp - Open Redirect + CSP Bypass +...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-43670

CVE-2026-43670 is a Content Security Policy (CSP) bypass in WebKit's AudioWorklet context , fixed in Safari 26.5 , iOS 18.7.9 / iPadOS 18.7.9 , iOS 26.5 / iPadOS 26.5 , and macOS Tahoe 26.5 . Processing maliciously crafted web content may allow an attacker to circumvent CSP, potentially enabling ...

loxs-optimized

loxs-optimized Projeto de https://github.com/coffinxp/loxs CSP-Bypass-xss.txt Nota: Ele contorna principalmente o payload de CSP 2024-11-06 Adiciona CSP-Bypass-xss.txt a xss.txt 2024-11-07 Removendo informações que interferem Somente as informações vulneráveis são exibidas 2024-11-11 Resolve o...