9239 matches found
CVE-2025-32379
CVE-2025-32379 (Koa, Node.js): In koa < 2.16.1 and
Exploit for CVE-2025-29927
CVE-2025-29927 Next.js Middleware Bypass Scanner CVE-2025...
Next.js Middleware 15.2.2 - Authorization Bypass
Exploit Title: Next.js Middleware Bypass Vulnerability CVE-2025-29927 Date: 2025-03-26 Exploit Author: kOaDT Vendor Homepage: https://nextjs.org/ Software Link: https://github.com/vercel/next.js Version: 13.0.0 - 13.5.8 / 14.0.0 - 14.2.24 / 15.0.0 - 15.2.2 / 11.1.4 - 12.3.4 Tested on: Ubuntu...
GHSA-223J-4RM8-MRMF Next.js may leak x-middleware-subrequest-id to external hosts
Summary In the process of remediating CVE-2025-29927, we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers. Learn more here. Credit Thank you to Jinseo Kim kjsman and RyotaK GMO Flat...
Next.js may leak x-middleware-subrequest-id to external hosts
Summary In the process of remediating CVE-2025-29927, we looked at other possible exploits of Middleware. We independently verified this low severity vulnerability in parallel with two reports from independent researchers. Learn more here. Credit Thank you to Jinseo Kim kjsman and RyotaK GMO Flat...
CVE-2025-30218 Next.js may leak x-middleware-subrequest-id to external hosts
Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host ...
CVE-2025-30218 Next.js may leak x-middleware-subrequest-id to external hosts
Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host ...
Next.js 信息泄露漏洞
Next.js is a React framework open-sourced by Vercel. An information disclosure vulnerability exists in Next.js, which stems from insufficient validation of the x-middleware-subrequest-id, which could lead to information disclosure. The following versions are affected: versions prior to 12.3.6,...
Malicious code in cf-middleware-set-header (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2865 Malicious code in cf-middleware-set-header (npm)
--- -= Per source details. Do not edit below this line.=-...
编号撤回
Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. The platform is primarily used for building, deploying, and hosting Java applications and services. This CVE number has been withdrawn...
VulnCheck KEV: CVE-2025-29927
Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching...
Exploit for CVE-2025-29927
PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...
Exploit for CVE-2025-29927
PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...
Exploit for CVE-2025-29927
CVE-2025-29927: Next.js Middleware Bypass PoC This repository...
Next.js Middleware Flaw Lets Attackers Bypass Authorization
Researchers have uncovered a critical vulnerability CVE-2025-29927 in Next.js middleware, allowing authorization bypass. Learn about the exploit and fixes...
Security Bulletin: IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities
Summary IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2024-30260 DESCRIPTION: Node.js undici module could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw wit...
Exploit for CVE-2025-29927
Next.js Middleware Bypass CVE-2025-29927 Proof of Concept T...
Next.js Authorization Bypass
Proof of concept exploit for a critical security vulnerability affecting Next.js, a popular React framework for building full-stack web applications. This flaw allows attackers to bypass authorization checks implemented in Next.js middleware, potentially granting unauthorized access to sensitive...