claude-create-CVE-2025-29927

Next.js Middleware Vulnerability Tester CVE-2025-29927 This application demonstrates the Next.js middleware authorization bypass vulnerability CVE-2025-29927. About The Vulnerability CVE-2025-29927 is an authorization bypass vulnerability in Next.js middleware. By sending a specially crafted HTTP...

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

rack-bug

Rack::Bug Code Climate Repository: http://github.com/brynary/rack-bug Description Rack::Bug adds a diagnostics toolbar to Rack apps. When enabled, it injects a floating div allowing exploration of logging, database queries, template rendering times, etc. Features Password-based security IP-based...

CVE-2026-69215

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie. A cookie for example.com can consequently be sent to an...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

CVE-2026-83480

CVE-2026-83480 affects the WebSocket component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can trigger a partial denial of service against the affected instance. The CVSS 3.1 base score is 5.3 (MEDIU...

CVE-2026-83458

Oracle Helidon (part of Oracle Fusion Middleware), specifically the JSON component , is affected in supported versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to cause a partial denial of service (partial DOS) of Helidon....

CVE-2026-83439

CVE-2026-83439 affects the helidon-security-providers-idcs-mapper component of Oracle Helidon (Fusion Middleware), versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modificat...

CVE-2026-83424

Oracle JDeveloper (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized access to critical data or c...

CVE-2026-83423

Oracle JDeveloper (Oracle Fusion Middleware, component: Security Framework ) is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover o...

CVE-2026-83355

Oracle Enterprise Manager for Fusion Middleware (component: Metrics ) in supported versions 13.5 and 24.1 contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to fully compromise the product, resulting in takeover with high impact to confidentiali...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

CVE-2026-83337

CVE-2026-83337 affects the Remote Diagnostic Agent component of Oracle Middleware Common Libraries and Tools (part of Oracle Fusion Middleware). Supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 are impacted. The vulnerability is described as easily exploitable by a low-privil...

CVE-2026-83330

CVE-2026-83330 is a Denial of Service vulnerability in the WebSocket component of Helidon (Oracle Fusion Middleware), affecting versions 4.0.0 through 4.5.4 . An unauthenticated remote attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the affe...

CVE-2026-83281

CVE-2026-83281 is a Denial-of-Service vulnerability in Oracle Fusion Middleware Helidon , specifically the helidon-webserver component, affecting versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash, resulting in a ...

CVE-2026-83276

CVE-2026-83276 affects the helidon-webclient-http2 component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP/2 can trigger a hang or frequently repeatable crash, resulting in a complete denial of service...

CVE-2026-83266

CVE-2026-83266 affects the Resource Catalog Services component of Oracle JDeveloper (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized access to all Oracle JDeveloper accessi...

CVE-2026-83265

CVE-2026-83265 affects the Web Services Agent component of Oracle Web Services Manager (Oracle Fusion Middleware), versions 12.2.1.4.0 and 14.1.2.0.0 . The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP , making it easily reachable without prior authentic...

CVE-2026-83151

CVE-2026-83151 affects the Messaging Enabler component of Oracle Fusion Middleware – Service Delivery Platform , versions 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via SOAP can exploit this vulnerability to achieve full takeover of the Service Delivery Platform, ...

CVE-2026-83106

CVE-2026-83106 affects the Oracle Forms product of Oracle Fusion Middleware, specifically the Forms Services, C/S, Charmode component. Supported versions 12.2.1.19.0 and 14.1.2.0.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeo...