CVE-2025-29927-PoC

CVE-2025-29927 - Bypass de autorización en el middleware de Next.js PoC Este repositorio contiene una prueba de concepto PoC para CVE-2025-29927 , una vulnerabilidad crítica en Next.js que permite a los atacantes eludir las comprobaciones de autorización abusando de un encabezado HTTP específico...

POC-CVE-2025-29927-

Afectados Next.js 15.x 15.2.3, 14.x 14.2.25, Next.js 13.x 13.5.9 Implementaciones autoalojadas que usan Middleware para funcionalidades críticas, como la autenticación. Guía root@kitploit: npm run dev root@kitploit: curl --compressed -X GET http://localhost:3000/dashboard \ -H "Host:...

CVE-2025-29927

CVE-2025-29927 Crítico - 9.1 Vulnerabilidad de omisión de middleware en Next.js Práctica de la vulnerabilidad CVE-2025-29927 en una aplicación Next.js donde el encabezado interno x-middleware-subrequest puede usarse para omitir la autenticación de middleware y el acceso restringido. Explicación...

AgentMemshell

AgentMemshell 基于MemShellParty的Agent内存马二开，使其兼容主流操作系统，适用于在JDK全版本无回显命令执行场景下实现对所有Java进程打入内存马。 目前仅实现Tomcat中间件，项目若有一定Star后会继续进行迭代更新。 TomcatEcho 参数 ekJUTPFN Godzilla 密码：RIZpWiOg 密钥：QZgwCOfx 请求头：User-Agent: avZplwxE...

exploit-CVE-2025-29927

Exploit para CVE-2025-29927 Next.js - Bypass de Autorización ¿Te gusta este repositorio? ¡Danos una ⭐! Solo con fines educativos y de investigación de seguridad autorizada. Autor del Exploit @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción de la Vulnerabilidad Next.js es un framework de React para...

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

nextjs-middleware-auth-bypass

Next.js App Docker Deploy Este proyecto está preparado para iniciar la aplicación Next.js usando Docker. Build Crear imagen Docker: root@kitploit: docker build -t next-app . Run Iniciar el contenedor: root@kitploit: docker run -d --name next-app --restart always -p 3000:3000 next-app Access Acces...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

OpenFlagr <= 1.1.18 - Authentication Bypass

OpenFlagr = 1.1.18 contains an authentication bypass caused by improper path normalization handling in HTTP middleware whitelist logic, letting attackers access protected API endpoints without valid credentials, exploit requires crafted requests. id: CVE-2026-0650 info: name: OpenFlagr = 1.1.18 -...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting

The Oracle WebCenter Sites component of Oracle Fusion Middleware is susceptible to multiple instances of cross-site scripting that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebCenter Sites. Impacted versions that are affected are 11.1.1.8.0, 12.2.1.2....

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

Next.js Middleware - Server-Side Request Forgery

In Next.js prior to versions 14.2.32 and 15.4.7, when request headerswere insecurely passed to NextResponse.next, an attacker could exploit this behavior to perform Server-Side Request Forgery SSRF attacks. id: CVE-2025-57822 info: name: Next.js Middleware - Server-Side Request Forgery author:...

Krayin CRM < 2.2.1 - Installer Authentication Bypass

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware caused by bypassing the CanInstall middleware redirect check via crafted HTTP POST requests, letting unauthenticated remote attackers overwrite the primary administrator account and gain full administrati...

FastChat - Open Redirect

Detects an open redirect vulnerability in lm-sys/fastchat version 0.2.36, which allows attackers to redirect users to malicious URLs. id: CVE-2024-10908 info: name: FastChat - Open Redirect author: DhiyaneshDK severity: medium description: | Detects an open redirect vulnerability in lm-sys/fastch...

Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware Web Services versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic...

nextjs-cve-2025-29927-poc

POC de Next.js para CVE-2025-29927 Omisión de autorización en Middleware de Next.js · CVE-2025-29927 · Base de datos de avisos de GitHub Next.js y el middleware corrupto: el artefacto autorizador - zherowebsecurity- ¿Qué es esto? Esta vulnerabilidad permite omitir la lógica del middleware...

cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...

nextjs-auth-bypass

nextjs-auth-bypass Analysis and exploitation of a Next.js authorization bypass vulnerability CVE-2025-29927 Next.js Authorization Bypass – CVE Analysis Overview This project demonstrates an authorization bypass vulnerability in a Next.js application caused by improper middleware validation...