Lucene search
+L

502 matches found

Kitploit
Kitploit
added 2026/08/26 10:18 p.m.2 views

NextSecureScan

NextSecureScan - Scanner de Vulnerabilidade de Middleware Next.js-CVE-2025-29927 NextSecureScan é um scanner de segurança abrangente projetado especificamente para identificar vulnerabilidades de bypass de autorização relacionadas a middleware CVE-2025-29927 em aplicações Next.js. Este scanner...

9.1CVSS7.3AI score0.99203EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/08/26 10:10 p.m.3 views

CVE-2023-4631

ID CVE : CVE-2023-4631 Tipo de Vulnerabilidade : Spoofing de Endereço IP Descrição : O plugin DoLogin Security para WordPress é vulnerável a Spoofing de Endereço IP nas versões até, e incluindo, 3.6. Isso se deve a restrições insuficientes sobre onde as informações de endereço IP são recuperadas...

5.3CVSS5.6AI score0.00624EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 10:00 p.m.2 views

BypassFuzzer

Bypass Fuzzer मूल 403fuzzer.py : ==नोट: यह मेरे नए, चमकीले burp एक्सटेंशन के लिए हटा दिया गया है जो 1000000% बेहतर है। मेरे टूल्स का उपयोग करने के लिए धन्यवाद!== आप यहां एक्सटेंशन पा सकते हैं: https://github.com/intrudir/BypassFuzzer-Burp Fuzz 401/403ing endpoints for bypasses हेडर, पथ सामान्यीकर...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 9:57 p.m.2 views

cve-2025-29927

CVE-2025-29927 1. aceder a /api/flag 2. adicionar x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware como cabeçalho 3. ver a resposta...

9.1CVSS7.3AI score0.99203EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/08/26 9:53 p.m.1 views

CVE-2025-29927__Next.js

CVE-2025-29927 - Next.js मिडलवेयर प्राधिकरण बायपास POC ⚠️ कानूनी अस्वीकरण : यह टूल केवल सुरक्षा अनुसंधान, अधिकृत पेनेट्रेशन परीक्षण और शैक्षिक उद्देश्यों के लिए है। स्पष्ट अनुमति के बिना इस टूल का उपयोग लक्षित प्रणालियों पर करना अवैध और अनैतिक है। 📋 अवलोकन CVE-2025-29927 Next.js में एक महत्वपूर्ण...

9.1CVSS7.3AI score0.99203EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/08/26 9:14 p.m.2 views

CVE-2024-25170-Mezzanine-v6.0.0

उत्पाद: Mezzanine CMS संस्करण: v6.0.0 खोज की तारीख: 10.01.2024. रिपोर्ट की तारीख: 10.01.2024. भेद्यता प्रकार: गलत एक्सेस नियंत्रण। CVE ID: CVE-2024-25170 विवरण: Mezzanine v6.0.0 में एक समस्या है जो हमलावरों को Host Header में हेरफेर करके एक्सेस नियंत्रणों को बायपास करने की अनुमति देती है। POC जल्...

9.1CVSS5.2AI score0.00874EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 9:11 p.m.1 views

POC-CVE-2025-29927-

Versioni interessate Next.js 15.x 15.2.3, 14.x 14.2.25, Next.js 13.x 13.5.9 Configurazioni self-hosted che utilizzano Middleware per funzionalità critiche, come l'autenticazione. Guida root@kitploit: npm run dev root@kitploit: curl --compressed -X GET http://localhost:3000/dashboard \ -H "Host:...

9.1CVSS7.3AI score0.99203EPSS
SaveExploits58
Kitploit
Kitploit
added 2026/08/26 9:09 p.m.3 views

CVE-2022-22972

CVE-2022-22972 POC per CVE-2022-22972 che interessa VMware Workspace ONE, vIDM e vRealize Automation 7.6. Analisi tecnica Un'analisi tecnica delle cause profonde della vulnerabilità è disponibile sul nostro blog:...

9.8CVSS8.9AI score0.56305EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 9:09 p.m.2 views

CVE-2025-31161

CVE-2025-31161 - Exploit per il Bypass dell'Autenticazione di CrushFTP Questo script Python sfrutta la CVE-2025-31161, una vulnerabilità di bypass dell'autenticazione in CrushFTP, che consente ad attaccanti non autenticati di recuperare l'elenco degli utenti dall'endpoint API getUserList...

9.8CVSS9AI score0.99947EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/08/26 8:33 p.m.5 views

CVE-2025-54309

CVE-2025-54309 CrushFTP प्रमाणीकरण बायपास अवलोकन CVE-2025-54309 CrushFTP में एक प्रमाणीकरण बायपास भेद्यता है जो AS2 हेडर हेरफेर के माध्यम से अनधिकृत प्रशासनिक उपयोगकर्ता निर्माण की अनुमति देती है। तकनीकी विवरण भेद्यता का स्थान फ़ाइल : crushftp/server/ServerSessionHTTP.java विधि :...

9.8CVSS8.8AI score0.94362EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/08/26 8:23 p.m.2 views

CVE-2025-29927

Ambiente di test per la vulnerabilità di bypass dell'autorizzazione del middleware Next.js CVE-2025-29927 Versione inglese 📌 Panoramica del progetto Questo repository fornisce un ambiente locale per testare la vulnerabilità di bypass dell'autorizzazione del middleware di Next.js CVE-2025-29927. L...

9.1CVSS7.3AI score0.99203EPSS
SaveExploits58References1
Kitploit
Kitploit
added 2026/08/26 8:14 p.m.3 views

CVE-2019-11447-POC

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept CRFSlick द्वारा POC, AkkuS द्वारा खोजा गया CutePHP CuteNews 2.1.2 में एक समस्या पाई गई। एक हमलावर प्रोफ़ाइल क्षेत्र में अवतार अपलोड प्रक्रिया के माध्यम से, avatarfile फ़ील्ड के ज़रिए index.php?mod=main&opt=personal पर सर्वर में घुसपैठ कर सक...

8.8CVSS7.8AI score0.52272EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/26 7:38 p.m.3 views

nextjs-cve-2025-29927-poc

Next.js POC для CVE-2025-29927 Обход авторизации в Middleware Next.js · CVE-2025-29927 · База данных рекомендаций GitHub Next.js и повреждённый middleware: авторизующий артефакт - zherowebsecurity- Что это такое? Эта уязвимость позволяет обойти логику middleware. src/middleware.ts: root@kitploit:...

9.1CVSS7.2AI score0.99203EPSS
SaveExploits58References3
Kitploit
Kitploit
added 2026/08/26 7:36 p.m.3 views

CVE-2022-1388

CVE-2022-1388 POC per CVE-2022-1388 che colpisce diversi prodotti F5. Segui l'Horizon3.ai Attack Team su Twitter per le ultime ricerche sulla sicurezza: Horizon3 Attack Team James Horseman Zach Hanley Analisi Tecnica Un'analisi tecnica delle cause principali della vulnerabilità può essere trovata...

9.8CVSS9AI score0.99958EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/08/26 7:31 p.m.2 views

Forbidden-Buster

Forbidden Buster è uno strumento progettato per automatizzare varie tecniche al fine di bypassare i codici di risposta HTTP 401 e 403 e ottenere accesso a aree non autorizzate nel sistema. Questo codice è realizzato solo per appassionati e professionisti della sicurezza. Utilizzalo a tuo rischio...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 4:38 p.m.1 views

BurpSuite_403Bypasser

403Bypasser Eine BurpSuite-Erweiterung zur Umgehung von 403-beschränkten Verzeichnissen. Durch die Verwendung des PassiveScan standardmäßig aktiviert wird jede 403-Anfrage automatisch von dieser Erweiterung gescannt, also einfach zu BurpSuite hinzufügen und genießen. Payloads: $1: HOSTNAME $2: PA...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 4:32 p.m.2 views

byp4xx

root@kitploit: / / / // / / / / / / / // /| |// |// / // / // / // / / /./, / ./ // //|//|| /// Bypasser 40X in Go. Metodi da bugbountytips, header, verb tampering, user agent e altro. Utilizzo: byp4xx Some cURL options you may use as example: -L segui i reindirizzamenti risposte 30X -x : per...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 11:55 a.m.2 views

CVE-2022-1388-POC

CVE-2022-1388 Poc by PsychoSec POC migliorato per CVE-2022-1388 che colpisce multipli prodotti F5. Questa è una versione migliorata del Proof of Concept di Horizon3 per CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 Questa versione contiene molti miglioramenti oltre a una shell...

9.8CVSS9AI score0.99958EPSS
SaveExploits63References1
Kitploit
Kitploit
added 2026/08/26 10:20 a.m.3 views

CVE-2025-29927-PoC

CVE-2025-29927: PoC di Bypass del Middleware di Next.js Questo repository contiene una proof of concept PoC per CVE-2025-29927, una vulnerabilità nel middleware di Next.js che consente di aggirare i controlli di autenticazione e autorizzazione tramite la manipolazione degli header. Dettagli della...

9.1CVSS7.2AI score0.99203EPSS
SaveExploits58References2
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js Laboratorio PoC per CVE-2025-32421 – Simulazione di Race Condition Cache Poisoning in Next.js Laboratorio CVE-2025-32421 – Race Condition Cache Poisoning in Next.js Questo laboratorio riproduce il comportamento descritto nel CVE-2025-32421...

3.7CVSS4.7AI score0.00772EPSS
SaveExploits2
Rows per page
Query Builder