cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...

nextjs-auth-bypass

nextjs-auth-bypass Analysis and exploitation of a Next.js authorization bypass vulnerability CVE-2025-29927 Next.js Authorization Bypass – CVE Analysis Overview This project demonstrates an authorization bypass vulnerability in a Next.js application caused by improper middleware validation...

CVE-2025-29927-Sigma-Rule

CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

CVE-2025-29927-Nextjs-Analysis

CVE-2025-29927 Next.js Analysis This repository contains a self-hosted Next.js lab environment created for analyzing CVE-2025-29927 in Docker. Overview CVE-2025-29927 is a vulnerability related to authorization checks implemented in Next.js middleware. This project was built as a local lab to...

Next.js-Middleware-Bypass-CVE-2025-29927-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability so Big shout out to zhero & inzo and you can find their blogpost here :...

CVE-2025-29927

🕷️ Next.js CVE-2025-29927 🧑🏻‍💼 Legal Disclaimer This project is a Next.js application that has been intentionally configured to be vulnerable to an Authorization Bypass in Next.js Middleware CVE-2025-29927. It is provided solely for lawful, educational, and research purposes. By accessing, using,...

CVE-2025-29927

Next.js Middleware Bypass Checker | CVE-2025-29927 Automated Bash tool to detect Next.js applications vulnerable to the middleware bypass CVE-2025-29927 , based on research by Zhero Web Security. Requirements bash whatweb curl Install them on Debian/Ubuntu with: sudo apt install whatweb curl Usag...

CVE-2025-29927

Next.js Middleware Authorization Bypass Vulnerability Test Environment CVE-2025-29927 📌 Project Overview This repository provides a local environment for testing the Next.js middleware authorization bypass vulnerability CVE-2025-29927. This vulnerability allows attackers to bypass middleware...

nextjs-cve-demo

Example: Authorization Bypass in Next.js Middleware CVE-2025-29927 This Repo provides example projects demonstrating the Middleware authorization bypass vulnerability in Next.js CVE-2025-29927. This vulnerability allows unauthorized users to access protected resources. Vulnerability Overview...

CVE-2025-29927_Scanner

CVE-2025-29927 Checker 📌 Introduction This script checks for the CVE-2025-29927 vulnerability in Next.js servers by testing multiple payloads in the x-middleware-subrequest header to detect unauthorized access. ❓ What is CVE-2025-29927? CVE-2025-29927 is a vulnerability that allows security...

day10-nextjs-middleware-lab

Day 10 — Next.js middleware auth-bypass lab CVE-2025-29927 simulation Important: Educational lab only. Run locally in Docker. Quickstart: npm i build from repo root with files above docker build -t day10-nextjs-lab . run docker run --rm -d -p 8080:3000 --name day10 day10-nextjs-lab Open...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...

CVE-2025-29927_Next.js_Auth_Bypass

CVE-2025-29927 - Next.js Auth Bypass PoC This is a Proof of Concept PoC in Python to detect the critical vulnerability CVE-2025-29927 that affects applications developed with Next.js , specifically when they use middleware for authorization. 📌 The vulnerability allows completely bypassing...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

web-application-firewall-

Web Application Firewall Simulation Overview This project demonstrates a Web Application Firewall WAF simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits th...

CVE-2025-29927-PoC

CVE-2025-29927 — Bypass de autorización de middleware de Next.js — PoC verificado Un pequeño proyecto de GitHub para verificar CVE-2025-29927 Bypass de autorización de middleware de Next.js en un laboratorio de autorización local VMware: máquina objetivo Ubuntu + máquina atacante Kali. ⚠️ Aviso...

CVE-2025-29927-Nextjs-Bypass-PoC

PoC: CVE-2025-29927 - Next.js Middleware Bypass This repository contains a Proof of Concept PoC demonstrating how to bypass middleware security checks in Next.js v13.5.6 by exploiting a vulnerability related to internal HTTP headers. Vulnerability Overview: CVE-2025-29927 What is it? CVE-2025-299...

CVE-2025-29927-scanner

CVE-2025-29927 Scanner This Python script identifies hosts vulnerable to CVE-2025-29927, an improper authorization vulnerability in the Next.js middleware that may allow authentication bypass. The script checks for Next.js usage, identifies the version, detects the x-middleware-subrequest header,...