nextjs-middleware-auth-bypass-lab

Next.js ミドルウェア認可バイパス CVE-2025-29927 脆弱性とは? Next.js アプリケーションでは、ミドルウェアがリクエストがアプリケーションに到達する前に実行され、認証や認可などのチェックを実行します。 CVE-2025-29927 の脆弱性では、特別に追加された x-middleware-subrequest HTTP ヘッダーにより、ミドルウェアが特定の状況下でリクエストを検証済みとして扱う可能性があります。これにより、権限のないユーザーが保護されたページにアクセスできる可能性があります。 プロジェクトについて このプロジェクトでは、Docker...

CVE-2026-88899

CVE-2026-88899 - Knowns 0.30.0 未認証ヘッダーインジェクションによりAIエージェントがホストファイルシステムへ無制限にアクセス可能 概要 Knownsの組み込みOpenCode...

CVE-2026-54547 Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in metaadsmcp/core/httpauthintegration.py rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent, while extracttokenfromheaders doe...

CVE-2026-59157

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

DEBIAN-CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

CVE-2024-58384

A flaw was found in Tornado's CurlAsyncHTTPClient component. This vulnerability, known as CRLF Carriage Return Line Feed injection, occurs because the client fails to properly reject carriage return and line feed characters in HTTP request headers. A remote attacker can exploit this by injecting...

CVE-2026-59157

webhookd is a minimalist webhook server that triggers shell scripts via HTTP requests. Prior to 1.22.0 , deployments without htpasswd authentication forwarded all incoming HTTP headers into the hook script environment via HTTPParamsToShellVars in pkg/api/index.go without an allowlist. If an upstr...

CVE-2026-59157 webhookd: Unrestricted HTTP Header to Shell Variable Injection

webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/api/index.go into the hook script...

CVE-2024-58384 Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

CVE-2024-58384

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

CVE-2024-58384

CVE-2024-58384 affects the Tornado Python web framework in versions before 6.4.1 . The flaw resides in the CurlAsyncHTTPClient component, which fails to reject carriage return and line feed (CRLF) characters in HTTP request headers. A remote attacker can inject CRLF sequences into header values t...

EUVD-2024-55766

Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carriage return and line feed characters in request headers. Attackers can inject CRLF sequences into header values to inject arbitrary headers or construct entirely new HTTP requests...

CVE-2026-59230

A flaw was found in Apache Camel's camel-mail component. The MimeMultipart data format copies MIME headers from an incoming message onto the Camel message when unmarshalling with headersInline=true, without applying a HeaderFilterStrategy. An attacker who can provide a crafted MIME message may...

CVE-2026-33453

camel-coap 헤더 인젝션 → RCE 취약점 재현 도구 CVE-2026-33453 이 프로젝트는 Apache Camel camel-coap 컴포넌트에서 CVE-2026-33453 으로 추적되는 Camel 메시지 헤더 인젝션 취약점을 시연합니다. 인증되지 않은 공격자가 단일 CoAP UDP 패킷을 전송하면 Exchange에 임의의 Camel 제어 헤더를 주입할 수 있으며, 라우트가 camel-exec와 같은 헤더에 민감한 프로듀서로 전달할 때 원격 코드 실행 이 가능합니다. 권고문:...

CVE-2026-86818 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization

fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv, that added a mailto scheme parser in version 4.1.3. In versions 4.1.3 and 4.1.4, the mailto parser compares each query field name to the reserved names to, subject, and body while the name is still...

CVE-2026-47323

camel-cxf-rest / camel-cxf / camel-knative-http 헤더 인젝션 재현기 CVE-2026-47323 이 프로젝트는 Apache Camel의 CXF 및 Knative HTTP 헤더 필터 전략에서 메시지-헤더 인젝션 을 시연하며, CVE-2026-47323 로 추적됩니다. CxfRsHeaderFilterStrategy camel-cxf-rest, CxfHeaderFilterStrategy camel-cxf-transport 및 KnativeHttpHeaderFilterStrategy...

CVE-2026-40047

camel-docling CLI 引数インジェクション/パストラバーサル再現ツール CVE-2026-40047 このプロジェクトは、Apache Camel の camel-docling コンポーネントにおける CLI 引数インジェクションおよびパストラバーサル の脆弱性 CVE-2026-40047 を実証するものです。DoclingProducer はメッセージヘッダーから外部の docling コマンドラインツールの呼び出しを構築しますが、CamelDoclingCustomArguments ヘッダーを介して指定されるカスタム引数は、不十分な検証 ブラックリストとリテラル...

CVE-2026-48205

camel-dns dns. / term ヘッダーインジェクション再現コード CVE-2026-48205 このプロジェクトは、Apache Camel の camel-dns コンポーネントにおける メッセージヘッダーインジェクション を実証するもので、CVE-2026-48205 として追跡されています。DNS プロデューサーは、クエリ対象のリゾルバ、検索する名前/ドメイン、レコードタイプ/クラス、検索語といった操作パラメーターを Exchange...

CVE-2026-46588

camel-couchdb CouchDb 헤더 인젝션 재현기 CVE-2026-46588 이 프로젝트는 Apache Camel의 camel-couchdb 구성 요소에서 발견된 메시지 헤더 인젝션 을 시연하며, CVE-2026-46588 로 추적됩니다. 이 구성 요소는 CouchDbDatabase, CouchDbSeq, CouchDbId문서 ID, CouchDbRev문서 개정, CouchDbMethod작업 메서드 등 여러 Exchange 헤더를 읽어 동작을 제어합니다. 이러한 헤더 상수CouchDbConstants에 정의됨의 문자열...