CVE-2025-29927

Next.js CVE-2025-29927 此仓库包含关于 Next.js 中 CVE-2025-29927 漏洞的概念验证，其中内部标头 x-middleware-subrequest 可被利用来绕过中间件检查（如身份验证）。 受影响版本 Next.js 15.x 🧪 本项目已在 Next.js v13.4.19 上测试。 1. 克隆仓库： git clone https://github.com/goncalocsousa1/CVE-2025-29927.git cd CVE-2025-29927 2. 安装依赖： npm install 运行应用程序 1. 启动开发服务器： np...

nextjs-cve-demo

Ejemplo: Bypass de Autorización en Next.js Middleware CVE-2025-29927 Este repositorio proporciona un proyecto de ejemplo que demuestra la vulnerabilidad de bypass de autorización en el middleware de Next.js CVE-2025-29927. Esta vulnerabilidad permite que usuarios no autorizados accedan a recursos...

EUVD-2017-18694

Malware in sbrugna...

EUVD-2008-5516

Malware in sbrugna...

EUVD-2020-9391

Malware in sbrugna...

EUVD-2017-2547

Malware in sbrugna...

EUVD-2016-7223

Malware in sbrugna...

EUVD-2003-0823

Malware in sbrugna...

EUVD-2015-7714

Malware in sbrugna...

EUVD-2011-4033

Malware in sbrugna...

EUVD-2007-3244

Malware in sbrugna...

EUVD-2014-8942

Malware in sbrugna...

EUVD-2006-0895

Malware in sbrugna...

EUVD-2016-8752

Malware in sbrugna...

EUVD-2009-0122

Malware in sbrugna...

EUVD-2023-0544

Malicious code in bioql PyPI...

EUVD-2024-1586

Malicious code in bioql PyPI...

EUVD-2025-6938

Malicious code in bioql PyPI...

Server-Side Request Forgery (SSRF)

Next.js is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the improper use of the next function without explicitly passing the request object, which allows an attacker to exploit incorrectly forwarded user-supplied headers in self-hosted applications...

CVE-2025-32094

An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumstances, a client making an HTTP/1.x OPTIONS request with an "Expect: 100-continue" header, and using obsolete line folding, can lead to a discrepancy in how two in-path Akamai...