claude-create-CVE-2025-29927

Next.js 미들웨어 취약점 테스터 CVE-2025-29927 이 애플리케이션은 Next.js 미들웨어 인증 우회 취약점CVE-2025-29927을 시연합니다. 취약점 정보 CVE-2025-29927은 Next.js 미들웨어의 인증 우회 취약점입니다. 특수하게 조작된 HTTP 헤더x-middleware-subrequest를 전송함으로써, 공격자는 미들웨어에 구현된 인증 검사를 우회하고 보호된 리소스에 접근할 수 있게 됩니다. 설정 지침 1. 의존성 설치: cd...

NextBypass

NextBypass 🚨 Next.js Middleware Authorization Bypass Tool CVE-2025-29927 Features Exploit CVE-2025-29927 via x-middleware-subrequest header Auto-browser integration Proxy/Bookmarklet Vulnerability scanning & log analysis Network traffic monitoring Installation git clone...

CVE-2025-29927-PoC

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This repository contains a Proof of Concept PoC exploit for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks by abusing a middleware-specific HTTP header. Overview CVE ID:...

CVE-2025-29927-Sigma-Rule

CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...

CVE-2025-29927

Next.js CVE-2025-29927 Este repositorio contiene una prueba de concepto para la vulnerabilidad CVE-2025-29927 en Next.js, donde la cabecera interna x-middleware-subrequest puede ser explotada para eludir comprobaciones del middleware como la autenticación. Versiones afectadas Next.js 15.x 🧪 Este...

CVE-2025-29927

🕷️ Next.js CVE-2025-29927 🧑🏻‍💼 Legal Disclaimer This project is a Next.js application that has been intentionally configured to be vulnerable to an Authorization Bypass in Next.js Middleware CVE-2025-29927. It is provided solely for lawful, educational, and research purposes. By accessing, using,...

nextjs-cve-demo

Example: Authorization Bypass in Next.js Middleware CVE-2025-29927 This Repo provides example projects demonstrating the Middleware authorization bypass vulnerability in Next.js CVE-2025-29927. This vulnerability allows unauthorized users to access protected resources. Vulnerability Overview...

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introducción Este script verifica la vulnerabilidad CVE-2025-29927 en servidores Next.js, probando múltiples payloads en el encabezado x-middleware-subrequest para detectar accesos no autorizados. ❓ ¿Qué es CVE-2025-29927? CVE-2025-29927 es una vulnerabilidad que permite...

Vuln-Next.js-CVE-2025-29927

npx [email protected] Install packages npm install -D @types/bcrypt npm install mysql2 npm install jose npm install -D @types/jsonwebtoken Prepare DB CREATE TABLE users id INT PRIMARY KEY AUTOINCREMENT, username VARCHAR255 UNIQUE NOT NULL, password VARCHAR255 NOT NULL ; Run npm run dev...

next.js_cve-2025-29927

next.jscve-2025-29927 A small and simple Next.js application running version 14.2.24 used to test CVE-2025-29927. Access the admin area /admin by utilizing the vulnerability or the hardcoded credentials admin:admin. » git clone [email protected]:0xPThree/next.jscve-2025-29927.git » docker...

NextJS_CVE-2025-29927

Next.js Authorization Bypass Demo This application demonstrates the x-middleware-subrequest vulnerability in Next.js 13.4.19, which allows bypassing middleware protection. Setup 1. Install dependencies: npm install 2. Start the development server: npm run dev Vulnerability Demonstration The...

nextjs-cve-2025-29927

Next.js CVE-2025-29927 Middleware Vulnerability This repository is a monorepo project that allows you to compare the CVE-2025-29927 middleware vulnerability between Next.js versions 15.2.3 and 15.1.7. Vulnerability Description CVE-2025-29927 is a security vulnerability discovered in Next.js...

CVE-2025-29927

CVE-2025-29927 Bypass de autorización del middleware de Next.js La plantilla de detección para CVE-2025-29927 ahora forma parte oficial del repositorio de Nuclei Templates. https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-29927-HEADLESS.yaml Una...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware 15.2.2 - Authorization Bypass ⚠️ Critical Authentication Bypass in NextJS Middleware 🛠️ PoC implementation by @zs1n 💡 Overview NextJS is a popular React-based web framework, has an authentication vulnerability that affects versions prior to 12.3.5, 13.5.9,...

cve-2025-29927

cve-2025-29927 CVE-2025-29927 es una vulnerabilidad crítica en Next.js, un popular framework web basado en React. La falla existe en cómo la función de middleware maneja ciertos encabezados internos — específicamente, el encabezado x-middleware-subrequest...

next-attack

This is a Next.js project bootstrapped with create-next-app. Testing the vulnerability First, you can confirm that the middleware works and should redirect the user: curl http://localhost:3000/api/admin Then, you can show how the middleware is being bypassed with the followign command: curl -H...

CVE-2025-29927

CVE-2025-29927 – Next.js Middleware Authorization Bypass This repository contains a functional exploit for CVE-2025-29927, a critical authorization bypass vulnerability in Next.js. The flaw allows attackers to bypass middleware-based authentication and authorization checks, granting unauthorized...

CVE-2025-29927

CVE-2025-29927 Reproducción y corrección de la vulnerabilidad CVE-2025-29927. git clone [email protected]:Bongni/CVE-2025-29927.git cd CVE-2025-29927 En vulnerable/ hay una versión de la aplicación que es vulnerable al ataque. En fixed/ hay una versión de la aplicación que está actualizada a...

cve-2025-29927

CVE-2025-29927 1. ve a /api/flag 2. añade x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware como encabezado 3. ve la respuesta...

PT-2026-98782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the netfs unbuffered write function when the subreq-io iter variable results in zero length during the preparation phase. Recommendations At the moment, there ...