nextjs-cve-2025-29927

Next.js CVE-2025-29927 Middleware Vulnerability This repository is a monorepo project that allows you to compare the CVE-2025-29927 middleware vulnerability between Next.js versions 15.2.3 and 15.1.7. Vulnerability Description CVE-2025-29927 is a security vulnerability discovered in Next.js...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint $ curl...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...

POC-CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass PoC Overview This PoC demonstrates CVE-2025-29927, a vulnerability in Next.js middleware that allows attackers to bypass authentication, authorization, and CSP mechanisms using the x-middleware-subrequest header. Affected Versions Next.js versions 11.1.4 ...

nextjs-middleware-bypass-demo

CVE-2025-29927 Demo Original writeup: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Setup First, run the development server: npm i npm run dev Open http://localhost:3000 with your browser to see the result. Trying out the bypass curl -I http://localhost:300...

CVE-2025-54123-Poc

CVE-2025-54123 Exploit Hoverfly Authenticated Middleware Command Injection RCE | CVSS 9.8 CRITICAL Vulnerability Hoverfly -u -p -c --shell SHELL -t, --target - Hoverfly API endpoint required -u, --username - Admin username required -p, --password - Admin password required -c, --command -...

CVE-2025-29927

CVE-2025-29927 Critical - 9.1 Next.js Middleware Bypass Vulnerability Hands-On of CVE-2025-29927 vulnerability in Next.js application where the internal header x-middleware-subrequest can be used to bypass middleware authentication and restricted access. Explained Next.js use an internal header...

NextSecureScan

NextSecureScan - Next.js-CVE-2025-29927 Middleware Vulnerability Scanner NextSecureScan is a comprehensive security scanner specifically designed to identify middleware-related authorization bypass vulnerabilities CVE-2025-29927 in Next.js applications. This scanner leverages explicit header...

rack-bug

Rack::Bug Code Climate Repository: http://github.com/brynary/rack-bug Description Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based...

CVE-2026-86259

CVE-2026-86259 - OpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass Overview Verified. A two-leg exploit chain exists in OpenMAIC's authentication middleware and outbound provider request layer that allows an...

CVE-2025-2995

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint $ curl...

CVE-2025-29927-Testing

Testing script for CVE-2025-29927 Provided by CyberMaxx. CVE-2025-29927 Tester This PowerShell script is designed to help security researchers and system administrators test for CVE-2025-29927 vulnerabilities in Next.js applications. It checks whether a target application is vulnerable to the...

cve-2025-29927

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

CVE-2025-29927

CVE-2025-29927 Next.js Middleware Bypass Scanner CVE-2025-29927 CVE-2025-29927 is a specialized security tool for detecting the Next.js middleware bypass vulnerability CVE-2025-29927 affecting Next.js versions 11.1.4 through 15.2.2. This critical vulnerability allows attackers to bypass security...

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

CVE-2025-29927

Introduction Bypass Next.js middleware authentication mechanism by forging the x-middleware-subrequest request header, allowing unauthorized access to protected routes. Environment setup Source code derived from P神, Next.js version 15.2.2 For Next.js 15.x, this issue is fixed in 15.2.3...

CVE-2025-29927-PoC

CVE-2025-29927 — Next.js Middleware Authorization Bypass Verification PoC A small GitHub project for verifying CVE-2025-29927 Next.js Middleware Authorization Bypass in a local authorization lab VMware: Ubuntu target VM + Kali attacker VM. ⚠️ Disclaimer : This project is intended solely for...

NextSploit

🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...

CVE-2026-41452-PoC

CVE-2026-41452 — Krayin CRM Installer Auth Bypass → Admin Takeover CVSS 9.8 Critical · CWE-287 / CWE-306 · Jiva writeup · VulnCheck Summary Krayin CRM's installer exposes POST /install/api/admin-config-setup plus run-migration, run-seeder without CSRF protection withoutMiddleware'web' group. The...

dismap

🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...