CVE-2025-29927

Scanner Avançado de Vulnerabilidade CVE-2025-29927 Este é um scanner de nível profissional projetado para detectar a vulnerabilidade de bypass de middleware CVE-2025-29927 em aplicações Next.js. 🧠 O Que Faz Usa um navegador headless real Playwright para rastrear profundamente um site alvo incluin...

middleforce

MiddleForce 🔍 Panoramica MiddleForce è uno strumento specializzato per test di sicurezza progettato per rilevare e sfruttare la vulnerabilità CVE-2025-29927 nel middleware di Next.js. Questo strumento aiuta i professionisti della sicurezza a identificare applicazioni vulnerabili ad attacchi di...

ghost-route

👻 Ghost Route Uno script Python per verificare i siti Next.js per la vulnerabilità del middleware corrotto CVE-2025-29927. La vulnerabilità del middleware corrotto permette a un attaccante di bypassare l'autenticazione e accedere a rotte protette inviando un header personalizzato...

CVE-2025-29927

CVE-2025-29927 Next.js Middleware-Bypass-Scanner CVE-2025-29927 CVE-2025-29927 ist ein spezielles Sicherheitstool zur Erkennung der Next.js-Middleware-Bypass-Schwachstelle CVE-2025-29927, die die Next.js-Versionen 11.1.4 bis 15.2.2 betrifft. Diese kritische Schwachstelle ermöglicht es Angreifern,...

nextjs-cve-2025-29927-poc

PoC Next.js per CVE-2025-29927 Bypass dell'autorizzazione nel middleware di Next.js · CVE-2025-29927 · Database degli Advisory GitHub Next.js e il middleware corrotto: l'artefatto autorizzante - zherowebsecurity- Cos'è questo? Questa vulnerabilità permette di bypassare la logica del middleware...

PX4-Autopilot

Der Autopilot-Stack, auf den die Branche baut. Über PX4 ist ein Open-Source-Autopilot-Stack für Drohnen und unbemannte Fahrzeuge. Er unterstützt Multikopter, Starrflügler, VTOL, Rover und viele weitere experimentelle Plattformen – von Rennquads bis zu industriellen Vermessungsflugzeugen. Er läuft...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting

The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to multiple instances of cross-site scripting that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Impacted versions that are affected are 11.1.1.8.0, 12.2.1.2....

Next.js Middleware - Server-Side Request Forgery

In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next, an attacker could exploit this behavior to perform Server-Side Request Forgery SSRF attacks. id: CVE-2025-57822 info: name: Next.js Middleware - Server-Side Request Forgery author:...

FastChat - Open Redirect

Detects an open redirect vulnerability in lm-sys/fastchat version 0.2.36, which allows attackers to redirect users to malicious URLs. id: CVE-2024-10908 info: name: FastChat - Open Redirect author: DhiyaneshDK severity: medium description: | Detects an open redirect vulnerability in lm-sys/fastch...

CVE-2025-29927-POC

CVE-2025-29927-POC Introduzione Questo repository contiene un Proof of Concept PoC per CVE-2025-29927, una vulnerabilità ipotetica che dimostra un difetto nella gestione del middleware all'interno di un'applicazione web. Il PoC illustra come una richiesta HTTP appositamente modificata possa...

0xMiddleware

CVE-2025-29927: Exploração de Middleware no Next.js Esta ferramenta demonstra e automatiza a exploração de CVE-2025-29927 , uma vulnerabilidade no Next.js que permite a um atacante contornar verificações de middleware como autenticação abusando do cabeçalho interno x-middleware-subrequest. 🔧 Como...

Vuln-Next.js-CVE-2025-29927

root@kitploit: npx [email protected] Installer les packages root@kitploit: npm install -D @types/bcrypt npm install mysql2 npm install jose npm install -D @types/jsonwebtoken Préparer la base de données root@kitploit: CREATE TABLE users id INT PRIMARY KEY AUTOINCREMENT, username VARCHAR255...

CVE-2025-29927-PoC

CVE-2025-29927: Next.js मिडलवेयर बाईपास PoC यह रिपॉजिटरी CVE-2025-29927 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC है, जो Next.js मिडलवेयर में एक भेद्यता है जो हेडर हेरफेर के माध्यम से प्रमाणीकरण और प्राधिकरण जांच को बायपास करने की अनुमति देती है। भेद्यता विवरण प्रभावित संस्करण : = 11.1.4, 14.0.0, 15.0.0,...

exploit-CVE-2025-29927

Exploit per CVE-2025-29927 Next.js - Bypass dell'autorizzazione Ti piace questo repo? Dacci una ⭐! Solo per scopi educativi e di ricerca sulla sicurezza autorizzati. Autore dell'exploit @UNICORDev di @NicPWNs e @Dev-Yeoj Descrizione della vulnerabilità Next.js è un framework React per la creazion...

NextSecureScan

NextSecureScan - Next.js CVE-2025-29927 中间件漏洞扫描器 NextSecureScan 是一款全面的安全扫描器，专门设计用于识别 Next.js 应用程序中与中间件相关的授权绕过漏洞（CVE-2025-29927）。该扫描器利用显式头部操作技术、中间件重定向检测以及高级多语言绕过方法，提供彻底的漏洞评估。 🛡️ 功能特性 中间件检测 ：通过标准及高级 HTTP 头部检查（x-middleware-rewrite、x-middleware-set-cookie）显式检测 Next.js 中间件的使用情况。 重定分析 ：清晰识别中间件触发的重定向（HTT...

poc-cve-2025-29927

Bypass del Middleware di Next.js CVE-2025-29927 Proof of Concept Questo repository contiene un proof of concept POC per CVE-2025-29927 , una vulnerabilità critica in Next.js che consente agli attaccanti di bypassare i controlli di autorizzazione implementati nel middleware. 📋 Indice 1. Esecuzione...

limitrr-php

PHP में Redis का उपयोग करके हल्की दर सीमित करना। Limitrr PHP मेरी दूसरी लाइब्रेरी, Limitrr से बहुत अधिक प्रेरित है, जिसे NodeJS के लिए बनाया गया था। इसे यहाँ देखें। Limitrr PHP उपयोगकर्ताओं को अपने एप्लिकेशन में आसानी से दर सीमा रेट लिमिटिंग एकीकृत करने की अनुमति देता है। अन्य समान पैकेजों के...