CVE-2025-25198

CVE-2024-25198 mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controll...

CVE-2025-29927-PoC

CVE-2025-29927: PoC de Bypass de Middleware de Next.js Este repositorio contiene una prueba de concepto PoC para CVE-2025-29927, una vulnerabilidad en el middleware de Next.js que permite eludir las comprobaciones de autenticación y autorización mediante la manipulación de cabeceras. Detalles de ...

CVE-2025-29927__Next.js

CVE-2025-29927 - Next.js 中间件授权绕过 POC ⚠️ 法律声明 : 此工具仅用于安全研究、授权渗透测试和教育目的。在未获得明确许可的情况下，将此工具用于目标系统是非法且不道德的。 📋 概述 CVE-2025-29927 是 Next.js 中的一个关键安全漏洞，攻击者可以通过利用 x-middleware-subrequest 标头的不当处理来绕过基于中间件的授权控制。 🎯 漏洞详情 属性| 值 ---|--- CVE ID| CVE-2025-29927 CVSS 评分| 9.8 严重 受影响版本| Next.js 13.4.0 - 15.2.3 修复版本|...

middleforce

MiddleForce 🔍 概述 MiddleForce 是一款专业的安全测试工具，用于检测和利用 Next.js 中间件中的 CVE-2025-29927 漏洞。该工具可帮助安全专业人员识别存在中间件绕过攻击风险的应用程序。 🚀 功能特性 中间件绕过检测 ：自动测试 Next.js 中间件绕过漏洞 彩色输出 ：为易受攻击和不易受攻击的路由提供清晰的视觉指示 简洁的 CLI 界面 ：易于使用的命令行参数 多请求头测试 ：测试多种绕过技术 📋 环境要求 Python 3.x 所需依赖包： colorama requests argparse 💻 安装 自动安装（Linux）...

cve-2025-29927-demo

cve-2025-29927-demo Next.js における認可バイパスの脆弱性を再現するデモです。 当該脆弱性についての詳細は Next.jsの脆弱性CVE-2025-29927まとめ を参照してください。 脆弱性の再現方法 1. このリポジトリをクローンします。 root@kitploit: git clone https://github.com/t3tra-dev/cve-2025-29927-demo.git cd cve-2025-29927-demo git pull origin main 2. サーバーを起動します。 root@kitploit: npm insta...

CVE-2024-25170-Mezzanine-v6.0.0

产品：Mezzanine CMS 版本：v6.0.0 发现日期：10.01.2024. 报告日期：10.01.2024. 漏洞类型：访问控制不当。 CVE ID：CVE-2024-25170 描述：Mezzanine v6.0.0 中存在一个问题，允许攻击者通过操纵 Host 标头绕过访问控制。 POC 即将推出:...

CVE-2018-12633-TPLink-Auth-Bypass

CVE-2018-12633-TPLink-Auth-Bypass 针对 TP-Link TL-WR840N 固件中身份验证绕过漏洞（CVE-2018-12633）的技术案例研究与利用分析。 漏洞分析：TP-Link TL-WR840N 身份验证绕过（CVE-2018-12633） ⚠️ 免责声明： 本仓库仅用于教育和研究目的 。此处提供的分析旨在展示旧版固件中的漏洞，以强调生命周期管理和补丁应用的重要性。未经授权利用您不拥有的设备属于违法行为。 📄 执行摘要 本案例研究记录了对 CVE-2018-12633 的成功利用过程。该漏洞是 TP-Link TL-WR840N 无线 N 路由器...

CVE-2026-37236

A flaw was found in grpc-gateway up to v2.28.0. A remote attacker could exploit an incorrect access control vulnerability by sending a specially crafted POST request that includes the X-HTTP-Method-Override header. The application processes this header without restricting allowed methods, allowin...

EUVD-2026-68682

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The...

CVE-2026-82815 MegaEase EaseProbe Middleware server.go realIP access control

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The...

AZL-98343 CVE-2026-37236 affecting package cert-manager 1.12.15-12

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

SUSE CVE-2026-72816

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...

AZL-96689 CVE-2026-72816 affecting package influxdb 2.7.5-20

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...

AZL-96635 CVE-2026-72816 affecting package gh for versions less than 2.97.0-1

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...

org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation

A flaw was found in the Apache Camel CXF SOAP component. A remote attacker can exploit this vulnerability by manipulating the operationName header in an unauthenticated HTTP request. This improper input validation allows the attacker to force the CxfProducer to invoke unintended SOAP operations o...

CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-54199

Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing functionality //ServerClientcelink.htm, which is appended to the redirect target in the 302 HTTP response. If a line feed is added, this will also be added to...

CVE-2026-0516

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

EUVD-2026-53334

A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains...

org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation

A flaw was found in the Apache Camel CXF SOAP component. A remote attacker can exploit this vulnerability by manipulating the operationName header in an unauthenticated HTTP request. This improper input validation allows the attacker to force the CxfProducer to invoke unintended SOAP operations o...