cve-2025-29927

CVE-2025-29927 1. go to /api/flag 2. add x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware as header 3. see response...

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

CVE-2025-29927

Next.js Middleware Bypass Checker | CVE-2025-29927 Automated Bash tool to detect Next.js applications vulnerable to the middleware bypass CVE-2025-29927 , based on research by Zhero Web Security. Requirements bash whatweb curl Install them on Debian/Ubuntu with: sudo apt install whatweb curl Usag...

CVE-2026-41452-PoC

CVE-2026-41452 — Krayin CRM Installer Auth Bypass → Admin Takeover CVSS 9.8 Critical · CWE-287 / CWE-306 · Jiva writeup · VulnCheck Summary Krayin CRM's installer exposes POST /install/api/admin-config-setup plus run-migration, run-seeder without CSRF protection withoutMiddleware'web' group. The...

next-js-auth-bypass

Hello World - Next.js 12.2 A simple proof of concept Next.js 12.2 application. 🚀 Quick Start 1. Install Dependencies npm install 2. Run the Development Server npm run dev The application will be available at http://localhost:3000 🛠️ Available Scripts npm run dev - Start development server npm...

poc-nextjs-CVE-2025-29927

Next.js Middleware Subrequest Vulnerability Scanner A robust proof of concept PoC tool to detect the Next.js middleware vulnerability CVE-2025-29927. Overview This tool tests a critical vulnerability in Next.js applications where the x-middleware-subrequest header can be used to bypass security...

test-cve-2025-29927

Test app to exploit CVE-2025-29927 The NextJS app has cookie based authentification and a middleware to prevent unauthorized access to /admin page. To start the app run yarn then yarn dev To get unauthorized access to /admin page by using CVE-2025-29927 vulnerability run a proxy-server which adds...

nextjs-middleware-bypass-demo

CVE-2025-29927 Demo Original writeup: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Setup First, run the development server: npm i npm run dev Open http://localhost:3000 with your browser to see the result. Trying out the bypass curl -I http://localhost:300...

middleforce

MiddleForce 🔍 Overview MiddleForce is a specialized security testing tool designed to detect and exploit the CVE-2025-29927 vulnerability in Next.js middleware. This tool helps security professionals identify applications vulnerable to middleware bypass attacks. 🚀 Features Middleware Bypass...

CVE-2025-29927_demo

CVE-2025-29937 Reproduction Steps npm i npm run dev curl -H "x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware" http://localhost:3000/protected...

NextJS_CVE-2025-29927

Next.js Authorization Bypass Demo This application demonstrates the x-middleware-subrequest vulnerability in Next.js 13.4.19, which allows bypassing middleware protection. Setup 1. Install dependencies: npm install 2. Start the development server: npm run dev Vulnerability Demonstration The...

CVE-2025-29927-Testing

Testing script for CVE-2025-29927 Provided by CyberMaxx. CVE-2025-29927 Tester This PowerShell script is designed to help security researchers and system administrators test for CVE-2025-29927 vulnerabilities in Next.js applications. It checks whether a target application is vulnerable to the...

POC-CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass PoC Overview This PoC demonstrates CVE-2025-29927, a vulnerability in Next.js middleware that allows attackers to bypass authentication, authorization, and CSP mechanisms using the x-middleware-subrequest header. Affected Versions Next.js versions 11.1.4 ...

CVE-2025-29927-PoC

CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC This repository demonstrates the CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions Next.js 15.x 15.2.3 Next.js 14.x...

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

CVE-2025-29927

CVE-2025-29927 ★ CVE-2025-29927 Next.js middleware bypass PoC ★ Description CVE-2025-29927 : Next.js middleware bypass PoC description: Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it i...

Vuln-Next.js-CVE-2025-29927

npx [email protected] Install packages npm install -D @types/bcrypt npm install mysql2 npm install jose npm install -D @types/jsonwebtoken Prepare DB CREATE TABLE users id INT PRIMARY KEY AUTOINCREMENT, username VARCHAR255 UNIQUE NOT NULL, password VARCHAR255 NOT NULL ; Run npm run dev...

CVE-2025-29927

CVE-2025-29927 Next.js Middleware Bypass Scanner CVE-2025-29927 CVE-2025-29927 is a specialized security tool for detecting the Next.js middleware bypass vulnerability CVE-2025-29927 affecting Next.js versions 11.1.4 through 15.2.2. This critical vulnerability allows attackers to bypass security...

nextjs-vulnerable-app

Next.js Authentication App This is a Next.js application that implements authentication using NextAuth.js. The app features protected routes that require users to be authenticated to access certain pages. Project Structure nextjs-auth-app ├── components │ ├── Layout.js Layout component for...

Next.Js-middleware-bypass-vulnerability-CVE-2025-29927

A basic proof of concept of the CVE-2025-29927 vulnerability that allows to bypass the middleware scripts. Details: Read Here This uses Next.js version 15.2.2. The vulnerability allows the user to bypass the middleware script which contains the verification and can access the admin page without...