CVE-2025-29927

CVE-2025-29927 - Next.js Middleware 15.2.2 - 認証バイパス ⚠️ NextJS Middleware における重大な認証バイパス 🛠️ @zs1n による PoC 実装 💡 概要...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – Обход аутентификации CrushFTP 🔎 Обзор CVE-2025-2825 — это критическая уязвимость обхода аутентификации, затрагивающая CrushFTP , широко используемый сервер безопасной передачи файлов. Уязвимость позволяет удалённым злоумышленникам обойти аутентификацию входа и получить...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing Модуль аутентификации в Blackboard Learn уязвим для подмены HTTP-заголовка Host при проверке сервисного билета Central Authentication Service CAS. Сервисный билет CAS предназначен только для конкретного сервиса , но Blackboard Learn не проверяет...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

CVE-2026-35616-check

CVE-2026-35616 취약점 평가 도구 FortiClient EMS 서버가 CVE-2026-35616에 취약한지 중단 없이 안전하게 탐지합니다. Bishop Fox 블로그의 전체 분석 문서를 참조하세요. 설명 CVE-2026-35616은 FortiClient EMS 7.4.5 및 7.4.6의 사전 인증pre-authentication API 우회 취약점으로, 원격의 인증되지 않은 공격자가 HTTP 헤더 스푸핑을 통해 인증서 기반 인증을 우회할 수 있게 합니다. Django 애플리케이션은 사용자가 제어할 수 있는 HTTP...

CVE-2026-88004

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

EUVD-2026-75538

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

CVE-2026-88004 Traefik entrypoint header-name sanitization bypassed via request trailers

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

CVE-2026-88004 Traefik entrypoint header-name sanitization bypassed via request trailers

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

PT-2026-89452

Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted...

CVE-2026-35616

CVE-2026-35616 작성자: wa6n3r | GitHub | Web 설명 Fortinet API의 인증서 체인 검증 우회 취약점을 악용합니다. 이 스크립트는 다양한 소스에서 유효한 Common NameCN을 자동으로 탐지하고, 가짜 클라이언트 인증서를 생성한 후 X-SSL-CLIENT-VERIFY 및 X-SSL-CLIENT-CERT 헤더를 사용하여 보호된 엔드포인트에 요청을 수행합니다. !!!중요 : 테스트에 대한 명시적 허가를 받은 시스템에서만 사용하십시오. 요구 사항 Python 3.8+ 종속성: requests...

CVE-2025-29927

CVE-2025-29927 — Next.js middleware authorization bypass Кратко: уязвимость в middleware Next.js, позволяющая обходить проверки авторизации путём подделки заголовка x-middleware-subrequest. Содержание CVE-2025-29927 — Next.js middleware authorization bypass Содержание Сбор уязвимых хостов Ещё инф...

CVE-2019-17240

CVE-2019-17240 Эксплойт Версии до 3.9.2 включительно CMS Bludit уязвимы для обхода механизма защиты от брутфорса, который блокирует пользователей, совершивших 10 или более неудачных попыток входа. Уязвимость была обнаружена Rastating. Отправка запроса на вход с изменяющимся значением заголовка...

CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

CVE-2026-82533 DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

CVE-2026-82533

DeepSeek Harness prior to 0.1.2-alpha.1 contains an authentication bypass in its local HTTP control-plane API. The root cause is that the server validates only the client-supplied Host header rather than the actual TCP connection origin, allowing a network attacker to spoof authentication. This p...

CVE-2026-82533 DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

CVE-2026-55584

CVE-2026-55584 - phpSysInfo IP 허용 목록 우회 CWE-290, CVSS 7.5 높음, phpSysInfo = 3.4.5 참조: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED는 REMOTEADDR로 폴백하기 전에 공격자가 제어하는 X-Forwarded-For그다음 Client-IP 헤더에서 클라이언트 IP를 결정합니다. 신뢰할 수 있는 프록시 개념이 없으므로, 허용된 IP를 스푸핑하면 허용 목록을 무력화하고 xml.php를 통해 전체 시스템 정보가 노출됩니다. PoC:...

PT-2026-87187

🚨 AI AGENTS IN DEEPSEEK HARNESS CAN DISABLE THEIR OWN SANDBOX 🚨 CVE-2026-82533, CVSS 9.4, DeepSeek Harness dsh. 215,000+ GitHub stars, fastest growing repo. One. curl. command. = sandbox escape. 🤯 The harness ships an OS sandbox so a coding agent working on untrusted material can't reach your...

0xMiddleware

CVE-2025-29927: Next.js 미들웨어 익스플로잇 이 도구는 CVE-2025-29927 의 악용을 시연하고 자동화합니다. 이는 Next.js 의 취약점으로, 공격자가 내부 헤더 x-middleware-subrequest를 남용하여 미들웨어 검사예: 인증를 우회 할 수 있게 해줍니다. 🔧 익스플로잇 작동 방식 Next.js는 내부적으로 재귀 요청의 무한 루프를 방지하기 위해 x-middleware-subrequest 헤더를 사용합니다. 그러나 특정 버전에서는 이 헤더가 외부 조작으로부터 보호되지 않아 , 악의적인...