nextjs-auth-bypass

nextjs-auth-bypass Análisis y explotación de una vulnerabilidad de bypass de autorización en Next.js CVE-2025-29927 Bypass de Autorización en Next.js – Análisis de CVE Descripción general Este proyecto demuestra una vulnerabilidad de bypass de autorización en una aplicación Next.js causada por un...

CVE-2024-52528 Auth Token can be passed dummy or wrong the middleware response is 200 OK

Budget Control Gateway acts as an entry point for incoming requests and routes them to the appropriate microservices for Budget Control. Budget Control Gateway does not properly validate auth tokens, which allows attackers to bypass intended restrictions. This vulnerability is fixed in 1.5.2...

Cachet vulnerable to forced reinstall

Impact Authenticated users, regardless of their privileges User or Admin, can trick Cachet and install the instance again, leading to arbitrary code execution on the server. Patches This issue was addressed by improving the middleware ReadyForUse, which now performs a stricter validation of the...

CVE-2018-3717

connect node module before 2.14.0 suffers from a Cross-Site Scripting XSS vulnerability due to a lack of validation of file in directory.js middleware...