Exploit for CVE-2025-29927

PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...

Exploit for CVE-2025-29927

PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...

Exploit for CVE-2025-29927

Next.js Middleware Bypass CVE-2025-29927 Proof of Concept T...

Exploit for CVE-2025-29927

Testing script for CVE-2025-29927 Provided by CyberMaxx. CV...

Exploit for CVE-2025-29927

Testing script for CVE-2025-29927 Provided by CyberMaxx. CV...

Exploit for CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC T...

Next.js Middleware Authorization Bypass Scanner

This module detects self-hosted Next.js applications affected by CVE-2025-29927, an authorization bypass in the middleware layer. Next.js tags its own internal subrequests with the x-middleware-subrequest header and skips middleware when it sees it. The header is trusted without verifying it...

CVE-2024-43787 Hono CSRF middleware can be bypassed using crafted Content-Type header

Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypassed using crafted Content-Type header. MIME types are case insensitive, but isRequestedByFormElementRe only matches lower-case. As a result, attacker can bypass csrf middleware...